last executing test programs: 7.376551572s ago: executing program 0 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) (async, rerun: 64) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) mq_open(&(0x7f00000000c0)='&,:}%{\x00', 0x80, 0xa, &(0x7f00000002c0)={0x7ff, 0x5, 0xffff, 0x9}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae10, 0x800, 0x3, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x40, 0xfffffffe, 0x8000146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x200, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (rerun: 32) 7.286860071s ago: executing program 0 (id=1647): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) inotify_init1(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.991023026s ago: executing program 0 (id=1652): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getdents64(0xffffffffffffffff, 0x0, 0x0) 6.463501611s ago: executing program 0 (id=1657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000016c0)=[{{&(0x7f00000002c0)=@caif=@util, 0x80, &(0x7f0000001680)=[{&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/121, 0x79}, {&(0x7f0000001640)=""/1, 0x1}], 0x4}, 0xfff}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40a00, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b06e53f07010100000a900683749e821c0b8b9236590b09007a159384900eb7c9a96d7a78"], 0x0}, 0x0) 3.289262235s ago: executing program 0 (id=1693): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000540), &(0x7f0000000400)=ANY=[@ANYBLOB="656e633d72617720686173683d6d643400000000000000000000000000000000008e03683b4bd8562382000000f7ffffffffffffff00000000000000000000000000000000000000000000008000000000000000000003ac91338fbd6b8cad0e4bb4f67406632789b06f0c702617561f1ccaeea74e2d954dfd1caf6e04e18b2c69ae4ca0e2eec89685bec2eb7ee123d66dd5ea7b476d7d97dcd9d2ee652b081e5e3fe7f7d26055c96996db5bc28178b0d2929b7e1bdb87786da45f0000000000"], 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)=""/4105, 0x1f85f8}], 0x100000000000011a) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@euid_lt}, {@flag='posixacl'}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, 'workdir'}}, {@dont_hash}, {@fowner_lt}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1c3002, 0x61) write(r4, &(0x7f0000000240)="c7", 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9d, 0x7}, 0xc) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206010200000000000016000500000001000400020000000d000300686173683a6d61630000000011000300686173683a6e65742c6e6574000000400500050001000000"], 0x48}}, 0x88d1) sendfile(r4, r3, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 3.201401251s ago: executing program 3 (id=1695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2c0000000800000000ff00"], 0x20) 3.143253287s ago: executing program 3 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1080, 0x4071}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x800008}]}, 0x50}, 0x1, 0xf000, 0x0, 0x4010}, 0x0) 3.069868957s ago: executing program 3 (id=1706): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xf000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.371998344s ago: executing program 0 (id=1701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000016c0)=[{{&(0x7f00000002c0)=@caif=@util, 0x80, &(0x7f0000001680)=[{&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/121, 0x79}, {&(0x7f0000001640)=""/1, 0x1}], 0x4}, 0xfff}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40a00, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b06e53f07010100000a900683749e821c0b8b9236590b09007a159384900eb7c9a96d7a78"], 0x0}, 0x0) 2.151627662s ago: executing program 3 (id=1702): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x280c02, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) name_to_handle_at(r2, &(0x7f0000000500)='\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="80"], &(0x7f0000000700), 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open_by_handle_at(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="800000011c000000000000000000"], 0x0) close(0x3) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x20200, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000440)=0x3) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) 1.802786175s ago: executing program 2 (id=1704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xfd22) 1.598288081s ago: executing program 2 (id=1705): r0 = socket$inet6(0xa, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38008000", @ANYRES32=0x0, @ANYBLOB="0500000008000200030000001400010000000000000000000000ffffac1414bb"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5, r2}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f000037c000/0x14000)=nil, 0x14000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="6c0000000e06010a00000000000000000000000a050001"], 0x6c}}, 0x4000c080) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000a00000000000002fe800000000000000000000000000096000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bedc000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac14142c00"/398], 0x18c) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0x0, @remote, @mcast2, {[@dstopts={0x5c}], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) 1.369156031s ago: executing program 3 (id=1707): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r0, 0xd09, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c030) 1.223169048s ago: executing program 3 (id=1708): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302", @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1df) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r5, 0x5) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) 781.330512ms ago: executing program 1 (id=1712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf251000000008000300", @ANYRES32=r3, @ANYBLOB="c829cf389c865a9fa7025c6a8c0527bd1018ccd31124d659ce05cb232e01004a63749c781780f73a2f9a518129bf2bd004f1e752ed502200f80885b9f08e982b40a8f5b0"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) 693.293884ms ago: executing program 1 (id=1713): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x5, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x1, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x100, 0x401, 0x8, 0x1, 0x1, 0x6, 0xc, 0x9, 0xfffffffa, 0x7, 0x6, 0xa4, 0x7, 0x8, 0xbc]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) unshare(0x26020480) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) timerfd_create(0x0, 0x0) ioctl$sock_ifreq(r6, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) 693.091616ms ago: executing program 2 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0800080005000600000014e9d27d4c8e3d0a29640000080690780a010101ac14143e4e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0xfd22) 511.720226ms ago: executing program 2 (id=1715): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x280c02, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) name_to_handle_at(r2, &(0x7f0000000500)='\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="80"], &(0x7f0000000700), 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open_by_handle_at(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="800000011c000000000000000000"], 0x0) close(0x3) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x20200, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000440)=0x3) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) 183.588919ms ago: executing program 1 (id=1716): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$audio(0xffffff9c, &(0x7f0000000140), 0xc0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) 183.295286ms ago: executing program 1 (id=1717): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) ptrace(0x10, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x1, 0x7, {{0x32, 0x4, 0x3, 0x9, 0xc8, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x27, 0xc3, [@remote, @local, @local, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @multicast2, @multicast2]}, @rr={0x7, 0x1b, 0x5f, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @local, @multicast1]}, @noop, @rr={0x7, 0x1b, 0xaa, [@private=0xa010101, @empty, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x13, 0x31, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x7, [{@remote, 0x9}, {@local, 0x2}, {@rand_addr=0x64010100, 0x20000009}, {@empty, 0x6}, {@broadcast, 0x5}, {@multicast2, 0x9}, {@multicast1, 0xfffffffc}]}, @rr={0x7, 0x7, 0xef, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$inet(0x2, 0x1, 0x6) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000f80)={0x80000000, &(0x7f0000000ec0), 0x0}) bind$inet(r7, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) listen(r7, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c706f72743d32fb208ac23034392c6d6f756e74706f72743d323034392c70726f746f3d7463702c6d6f756e7470726f746f3d7463702c6e6f6c6f636b2c736f66742c74696d656f3d312c72657472616e733d8a3fe267cc4a2cb3c3a7a3c464eaba5360"]) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) fstat(r5, &(0x7f0000000400)) 104.507954ms ago: executing program 2 (id=1718): syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x11, 0x0, 0x4, 0x0, 0x1}]}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x100, 0x5, 0x9}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x800006, @rand_addr=' \x01\x00', 0xb0}]}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) 2.146781ms ago: executing program 1 (id=1719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x1903d) r3 = socket(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick=0x6, {0x5}, {0xe, 0xfd}, @addr={0x3, 0xa}}], 0x34) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r6, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r9, 0x708, 0x4) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00100400010000006800348014003500626174616476300000000000000000001400350073797a5f74756e0000000000000000001400350076657468315f766972745f7769666900140035006272696467655f736c6176655f3100001400350076657468305f746f5f626f6e6400000008000d008000000008001300", @ANYRES32=0x0, @ANYBLOB="91052f9b12480940a2bec1f0d4a748433bc6f4fabf82973530e79484fb85560c8772e523d7088b6d5d3689ab3ce30f9d1b5c8042b186efbe3d5b4bba434949eaa52758070c3f1dfc7f84c527b4bfab4f97700a32b7c5e0213e6c583e4ce35717fefd729d105e59de8713fff6be8cc6b706d0346957395a38fcd00e2f161ac54f3a9cd6b36bed9ef59ce6d203b51b94ef1312e15a6e8d880d1b7ccd8255b478b16a897817b5c7b41d80802b95d786fdee15ab9b08a20b"], 0x98}, 0x1, 0x0, 0x0, 0x24040051}, 0x240080d0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2a2ad8c03c56057dfa9da16d18a23e69108a14d3cbc84b1545708d8a03a1ed3318f516e45c4124616001d041e9c8cfab720a8b64c7ee8723b3fe6a37fca712f0a68cb162eb7fc22eb25e10fa44758e7a73da5a3b64ffd370f851cb3c0cbf4e421a15045432052dcf83533299cded941f92e78acf7e72ba099e1992ab7d4939811a0898f1800a8bc6934894f8cb11c8adf2aed4b6b60bdee62952e17521042f5aae66187160a3c2c99240d6fd35620dced9121ac9e9e2aacbe24c71e26bfa855670a21bcbd05b194c1c0e1628298ccc3f92742312d3453be47454cd507abccadc1d33acd09ca4110f84e9d2bf"], 0x11c}}, 0x4000) 1.828985ms ago: executing program 2 (id=1720): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000070000008500000028000000180100007820692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff000085000000060000009500002100000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0500000000000000abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x3, 0xb5, 0x6, 0x7fffffffffffffff, 0x1, 0x7fff, 0x9, 0xffffffffffffffff}, &(0x7f00000009c0)={0x3, 0x5, 0x7fffffffffffffff, 0x3, 0x72fe, 0xfffffffffffffff0, 0x1947, 0x40000000000008}, &(0x7f0000000a00)={0x8, 0xd7b5, 0x5, 0xf0ce, 0x8, 0x2, 0x800, 0x1}, &(0x7f0000000a80)={r4, r5+60000000}, &(0x7f0000000b00)={&(0x7f0000000ac0)={[0x8]}, 0x8}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000007580)={0x28, 0x2, 0x0, {0x0, 0x80, 0xce}}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)="c237100334b44b33730c9d0a0f0156f8ce61fbe5e34ef7221e", 0x19}, {&(0x7f0000000200)="cab9c343833a105f8e68915f51d6985ae27b3bfdcd4e4dd1405a7d2e633231aadedad4f80498523cdee8b73810a68a11d149365307e596ca91043abebf8fcd2d106f502804cf57750f52d9f3f5ffb7dd67f979881f7ee4ddf23c9f3bd95a1a6bbf1094d3b1511ed9b4963901d7139b2a6f", 0x71}, {&(0x7f0000000280)="09fcdc1f7f4e59ecfb350b8290046c1a829a839ae96829243d2a85c1f366982db7f15ac886afbb805e91fc31d958fe79aa895b5f11452c5d2ad44db6a3c8d7a955be4b59085415b06493b507a460b2ffb65f02dececd8aa2aec9730edeb3017551fdb264779fab2b5b960ac80dfafffe9bbab7ffd21e4c242f6fddacbf41eba1433ee0686ac24d5d6c78e7e086ba8c8b3a36cdf05e814611362bf46f34", 0x9d}, {&(0x7f0000000740)="acc168cede9dacedc3d1695558601ce07817f4a3325a67ec3d7d9e04424cf127e41586cffec3dee601784b3e46a1ef188bcdfea1a8d3d55944e670c6f2c9b8205644bf05ce6b395a22bdf16c709fe69894540a96bf21642224a8b748f091a63320b32eeafd566e73312be473b58b424a954f3d0dfe4ac0246e5969a3087c8889c93093f87234ff64b8339df4b7df521fb6da93ff61a03994bdedc7a807fafd49f17de6a44d71dd9533cbfd82047d", 0xae}], 0x4, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}], 0x10}, 0x4000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, r9, 0x0, 0x0, 0x8000000004}]) ioctl$MON_IOCX_GETX(r9, 0x400c920a, &(0x7f0000000980)={&(0x7f0000000500), &(0x7f00000008c0)=""/129, 0x81}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="05031600d3fc140000004788031c09102c28033c39118f692e53288e96775714", 0x20, 0x40004, &(0x7f0000000140)={0x11, 0x871c, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x7f, @mcast2, 0x5}, 0x1c) 0s ago: executing program 1 (id=1721): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r2, 0x0, 0x20008004) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x4e21, 0xffff, @remote}}]}, 0x110) syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000100)) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind(r4, &(0x7f0000000000)=@generic={0xa, "f7c39f5ee85fae0c91e3ccfb11d200005efe967df06c2913060a14051e3867cc75f0da4c1c0f660ee7cda99d667b56cba361b21d917f1d08beb895ab85c460adc58eea9034c4dda505f16b07d7ab538e5d435d5626c30d8a0ffd818eb88942ddb032a0ee83819d54cecffbac6e4b483814e486948fb090684a73b87fe590"}, 0x80) ioctl$EVIOCSABS3F(r3, 0x401845ff, 0x0) socket$packet(0x11, 0x3, 0x300) write(r3, &(0x7f0000000180)='0', 0x1) write(r3, &(0x7f00000001a0)='1', 0x1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): mp_stack_lvl+0x100/0x190 [ 251.355065][T10567] should_fail_ex.cold+0x5/0xa [ 251.355079][T10567] _copy_from_iter+0x1f4/0x1690 [ 251.355095][T10567] ? trace_kmem_cache_alloc+0xdd/0x100 [ 251.355106][T10567] ? __kasan_slab_alloc+0x89/0x90 [ 251.355118][T10567] ? __pfx__copy_from_iter+0x10/0x10 [ 251.355132][T10567] ? __asan_memset+0x23/0x50 [ 251.355147][T10567] ? __build_skb_around+0x278/0x390 [ 251.355166][T10567] ? is_vmalloc_addr+0x86/0xa0 [ 251.355182][T10567] netlink_sendmsg+0x808/0xda0 [ 251.355195][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.355208][T10567] ? apparmor_socket_sendmsg+0x15b/0x270 [ 251.355225][T10567] __sys_sendto+0x48b/0x4e0 [ 251.355236][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.355247][T10567] ? __pfx___sys_sendto+0x10/0x10 [ 251.355268][T10567] ? fput+0x7c/0x100 [ 251.355278][T10567] ? ksys_write+0x1ac/0x250 [ 251.355295][T10567] __ia32_sys_sendto+0xdd/0x1b0 [ 251.355306][T10567] ? __do_fast_syscall_32+0xb3/0x8b0 [ 251.355321][T10567] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.355333][T10567] __do_fast_syscall_32+0x13a/0x8b0 [ 251.355347][T10567] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.355361][T10567] do_fast_syscall_32+0x32/0x70 [ 251.355376][T10567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.355390][T10567] RIP: 0023:0xf700efec [ 251.355403][T10567] Code: Unable to access opcode bytes at 0xf700efc2. [ 251.355408][T10567] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 251.355420][T10567] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 251.355427][T10567] RDX: 0000000000010a73 RSI: 0000000000000800 RDI: 0000000000000000 [ 251.355433][T10567] RBP: 000000005a5de35b R08: 0000000000000000 R09: 0000000000000000 [ 251.355439][T10567] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.355445][T10567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.355458][T10567] [ 251.575262][T10574] ipip0: entered promiscuous mode [ 251.612173][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.614959][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.726270][ T852] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 251.896318][ T852] usb 8-1: Using ep0 maxpacket: 8 [ 251.909816][ T852] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 251.935359][ T852] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 251.955005][ T852] usb 8-1: config 179 has no interface number 0 [ 251.983755][ T852] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 252.022081][ T852] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 252.062485][ T852] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 230, changing to 11 [ 252.100684][ T852] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 57438, setting to 1024 [ 252.121097][ T852] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.126375][ T852] usb 8-1: config 179 interface 65 has no altsetting 0 [ 252.128626][ T852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.218692][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 252.361390][ T852] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input75 [ 252.446907][ T5131] input input75: unable to receive magic message: -110 [ 252.484365][ T5131] input input75: unable to receive magic message: -32 [ 252.512503][ T5131] input input75: unable to receive magic message: -32 [ 252.533535][ T5131] input input75: unable to receive magic message: -32 [ 252.878777][T10433] input input75: unable to receive magic message: -32 [ 253.287185][ T5131] input input75: unable to receive magic message: -32 [ 253.307121][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 253.310071][ T852] usb 8-1: USB disconnect, device number 39 [ 253.932624][T10594] FAULT_INJECTION: forcing a failure. [ 253.932624][T10594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.937038][T10594] CPU: 2 UID: 0 PID: 10594 Comm: syz.3.1384 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.937056][T10594] Tainted: [L]=SOFTLOCKUP [ 253.937060][T10594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.937067][T10594] Call Trace: [ 253.937071][T10594] [ 253.937076][T10594] dump_stack_lvl+0x100/0x190 [ 253.937098][T10594] should_fail_ex.cold+0x5/0xa [ 253.937112][T10594] _copy_from_iter+0x1f4/0x1690 [ 253.937128][T10594] ? __asan_memset+0x23/0x50 [ 253.937144][T10594] ? __pfx__copy_from_iter+0x10/0x10 [ 253.937158][T10594] ? __pfx___alloc_skb+0x10/0x10 [ 253.937176][T10594] netlink_sendmsg+0x808/0xda0 [ 253.937190][T10594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.937202][T10594] ? apparmor_socket_sendmsg+0x15b/0x270 [ 253.937220][T10594] ____sys_sendmsg+0xa4d/0xbe0 [ 253.937235][T10594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.937247][T10594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.937269][T10594] ___sys_sendmsg+0x190/0x1e0 [ 253.937290][T10594] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.937320][T10594] ? find_held_lock+0x2b/0x80 [ 253.937347][T10594] __sys_sendmsg+0x160/0x210 [ 253.937361][T10594] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.937378][T10594] ? __pfx_ksys_write+0x10/0x10 [ 253.937396][T10594] __do_fast_syscall_32+0x13a/0x8b0 [ 253.937411][T10594] ? lockdep_hardirqs_on+0x7d/0x110 [ 253.937425][T10594] do_fast_syscall_32+0x32/0x70 [ 253.937440][T10594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.937454][T10594] RIP: 0023:0xf70aefec [ 253.937466][T10594] Code: Unable to access opcode bytes at 0xf70aefc2. [ 253.937471][T10594] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 253.937483][T10594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 253.937490][T10594] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.937496][T10594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.937502][T10594] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 253.937508][T10594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.937521][T10594] [ 253.966716][T10596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 254.011810][T10596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.014112][T10601] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 254.016461][T10601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.027515][T10596] vhci_hcd vhci_hcd.0: Device attached [ 254.031128][T10601] vhci_hcd vhci_hcd.0: Device attached [ 254.039372][T10596] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 254.041394][T10596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.046580][T10596] vhci_hcd vhci_hcd.0: Device attached [ 254.057692][T10596] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 254.059758][T10596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.066518][T10596] vhci_hcd vhci_hcd.0: Device attached [ 254.068850][T10602] vhci_hcd: connection closed [ 254.069320][T10597] vhci_hcd: connection closed [ 254.069760][T10606] vhci_hcd: connection closed [ 254.071398][ T5785] vhci_hcd vhci_hcd.1: stop threads [ 254.078704][T10608] vhci_hcd: connection closed [ 254.087809][ T5785] vhci_hcd vhci_hcd.1: release socket [ 254.091072][ T5785] vhci_hcd vhci_hcd.1: disconnect device [ 254.094267][ T5785] vhci_hcd vhci_hcd.1: stop threads [ 254.095915][ T5785] vhci_hcd vhci_hcd.1: release socket [ 254.101997][ T5785] vhci_hcd vhci_hcd.1: disconnect device [ 254.103865][ T5785] vhci_hcd vhci_hcd.1: stop threads [ 254.105495][ T5785] vhci_hcd vhci_hcd.1: release socket [ 254.107880][ T5785] vhci_hcd vhci_hcd.1: disconnect device [ 254.110299][ T5785] vhci_hcd vhci_hcd.1: stop threads [ 254.111916][ T5785] vhci_hcd vhci_hcd.1: release socket [ 254.113567][ T5785] vhci_hcd vhci_hcd.1: disconnect device [ 254.296505][ T24] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 254.466729][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 254.471434][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 254.476252][ T24] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 254.487465][ T24] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 254.489989][ T24] usb 8-1: config 8 has no interface number 0 [ 254.491875][ T24] usb 8-1: config 8 interface 188 has no altsetting 0 [ 254.507763][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.510271][ T24] usb 8-1: Product: syz [ 254.511583][ T24] usb 8-1: Manufacturer: syz [ 254.513013][ T24] usb 8-1: SerialNumber: syz [ 254.609609][T10611] syzkaller0: entered promiscuous mode [ 254.611504][T10611] syzkaller0: entered allmulticast mode [ 254.660722][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.664085][T10611] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 254.667108][T10611] TC_ACT_REPEAT abuse ? [ 254.669849][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.726047][T10605] 9pnet_virtio: no channels available for device syz [ 254.776441][T10622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.782124][T10622] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 254.814336][T10626] syzkaller0: entered promiscuous mode [ 254.816081][T10626] syzkaller0: entered allmulticast mode [ 254.821068][T10626] FAULT_INJECTION: forcing a failure. [ 254.821068][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.825830][T10626] CPU: 0 UID: 0 PID: 10626 Comm: syz.1.1394 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.825847][T10626] Tainted: [L]=SOFTLOCKUP [ 254.825850][T10626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.825856][T10626] Call Trace: [ 254.825860][T10626] [ 254.825865][T10626] dump_stack_lvl+0x100/0x190 [ 254.825883][T10626] should_fail_ex.cold+0x5/0xa [ 254.825897][T10626] _copy_from_iter+0x1f4/0x1690 [ 254.825914][T10626] ? __pfx__copy_from_iter+0x10/0x10 [ 254.825930][T10626] ? find_held_lock+0x2b/0x80 [ 254.825944][T10626] ? dev_get_by_index+0x180/0x380 [ 254.825962][T10626] ? dev_get_by_index+0x180/0x380 [ 254.825984][T10626] packet_sendmsg+0x1be9/0x4f00 [ 254.826001][T10626] ? __pfx___might_resched+0x10/0x10 [ 254.826016][T10626] ? aa_sk_perm+0x30c/0xaa0 [ 254.826033][T10626] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.826043][T10626] ? __pfx_packet_sendmsg+0x10/0x10 [ 254.826058][T10626] ? apparmor_socket_sendmsg+0x15b/0x270 [ 254.826075][T10626] ____sys_sendmsg+0xa4d/0xbe0 [ 254.826090][T10626] ? __pfx_packet_sendmsg+0x10/0x10 [ 254.826103][T10626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.826124][T10626] ___sys_sendmsg+0x190/0x1e0 [ 254.826141][T10626] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.826176][T10626] ? find_held_lock+0x2b/0x80 [ 254.826196][T10626] __sys_sendmsg+0x160/0x210 [ 254.826209][T10626] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.826226][T10626] ? __pfx_ksys_write+0x10/0x10 [ 254.826244][T10626] __do_fast_syscall_32+0x13a/0x8b0 [ 254.826258][T10626] ? lockdep_hardirqs_on+0x7d/0x110 [ 254.826272][T10626] do_fast_syscall_32+0x32/0x70 [ 254.826287][T10626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.826300][T10626] RIP: 0023:0xf70befec [ 254.826312][T10626] Code: Unable to access opcode bytes at 0xf70befc2. [ 254.826317][T10626] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 254.826328][T10626] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 254.826335][T10626] RDX: 0000000000004005 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.826341][T10626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.826348][T10626] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 254.826354][T10626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.826368][T10626] [ 254.831425][ T24] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 254.901207][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 254.903166][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 254.906669][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.909921][ T24] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 254.912520][ T24] usb 8-1: media controller created [ 254.914130][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 254.915943][ T24] dw2102: i2c transfer failed. [ 254.917971][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 254.919770][ T24] dw2102: i2c transfer failed. [ 254.921262][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 254.922958][ T24] dw2102: i2c transfer failed. [ 254.924441][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 254.926263][ T24] dw2102: i2c transfer failed. [ 254.927749][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 254.929539][ T24] dw2102: i2c transfer failed. [ 254.931021][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 254.932813][ T24] dw2102: i2c transfer failed. [ 254.934289][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 254.940606][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.948528][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 254.950294][ T24] dw2102: command 0x0e transfer failed. [ 254.952038][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 254.953795][ T24] dw2102: command 0x0e transfer failed. [ 254.956454][ T5884] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 254.990282][T10628] 9pnet_virtio: no channels available for device syz [ 255.044375][T10629] FAULT_INJECTION: forcing a failure. [ 255.044375][T10629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.048511][T10629] CPU: 2 UID: 0 PID: 10629 Comm: syz.1.1395 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.048528][T10629] Tainted: [L]=SOFTLOCKUP [ 255.048532][T10629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.048539][T10629] Call Trace: [ 255.048543][T10629] [ 255.048547][T10629] dump_stack_lvl+0x100/0x190 [ 255.048565][T10629] should_fail_ex.cold+0x5/0xa [ 255.048579][T10629] _copy_from_iter+0x1f4/0x1690 [ 255.048594][T10629] ? __asan_memset+0x23/0x50 [ 255.048611][T10629] ? __pfx__copy_from_iter+0x10/0x10 [ 255.048624][T10629] ? __pfx___alloc_skb+0x10/0x10 [ 255.048641][T10629] netlink_sendmsg+0x808/0xda0 [ 255.048654][T10629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.048667][T10629] ? apparmor_socket_sendmsg+0x15b/0x270 [ 255.048684][T10629] ____sys_sendmsg+0xa4d/0xbe0 [ 255.048700][T10629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.048711][T10629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.048733][T10629] ___sys_sendmsg+0x190/0x1e0 [ 255.048751][T10629] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.048773][T10629] ? find_held_lock+0x2b/0x80 [ 255.048791][T10629] __sys_sendmsg+0x160/0x210 [ 255.048805][T10629] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.048821][T10629] ? __pfx_ksys_write+0x10/0x10 [ 255.048839][T10629] __do_fast_syscall_32+0x13a/0x8b0 [ 255.048853][T10629] ? lockdep_hardirqs_on+0x7d/0x110 [ 255.048867][T10629] do_fast_syscall_32+0x32/0x70 [ 255.048882][T10629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.048895][T10629] RIP: 0023:0xf70befec [ 255.048907][T10629] Code: Unable to access opcode bytes at 0xf70befc2. [ 255.048912][T10629] RSP: 002b:00000000f548c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 255.048923][T10629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 255.048930][T10629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.048936][T10629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.048942][T10629] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 255.048948][T10629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.048961][T10629] [ 255.049505][T10629] 9pnet_virtio: no channels available for device syz [ 255.146231][ T5884] usb 7-1: Using ep0 maxpacket: 16 [ 255.148268][ T5884] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.152163][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.155173][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.159464][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.163297][ T5884] usb 7-1: config 0 descriptor?? [ 255.167232][ T5884] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 255.256735][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 255.258449][ T24] dw2102: command 0x0e transfer failed. [ 255.260204][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 255.261988][ T24] dw2102: command 0x0e transfer failed. [ 255.263770][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 255.265549][ T24] dw2102: command 0x51 transfer failed. [ 255.278045][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.280171][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.294642][ T24] DVB: Unable to find symbol ds3000_attach() [ 255.297542][ T24] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 255.357020][ T24] rc_core: IR keymap rc-su3000 not found [ 255.358930][ T24] Registered IR keymap rc-empty [ 255.362728][ T24] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 255.367196][ T24] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input76 [ 255.371345][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 255.373513][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 255.375391][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 255.379725][ T24] usb 8-1: USB disconnect, device number 40 [ 255.405468][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 255.492338][ T43] audit: type=1326 audit(1787645779.818:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.3.1397" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 255.538960][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.542980][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.557584][T10634] 8021q: adding VLAN 0 to HW filter on device bond24 [ 255.608061][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 255.791534][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 255.931647][T10652] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 255.954356][T10652] 8021q: adding VLAN 0 to HW filter on device bond22 [ 255.960884][T10652] 9pnet_virtio: no channels available for device syz [ 255.963448][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 255.966320][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 256.377206][T10657] 9p: Bad value for 'wfdno' [ 256.428132][T10662] 9pnet_virtio: no channels available for device syz [ 256.484453][T10663] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 256.507391][T10663] 8021q: adding VLAN 0 to HW filter on device bond25 [ 256.541435][T10663] 9pnet_virtio: no channels available for device syz [ 257.742988][ T6087] usb 7-1: USB disconnect, device number 37 [ 257.791623][T10679] FAULT_INJECTION: forcing a failure. [ 257.791623][T10679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.797511][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.2.1407 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.797539][T10679] Tainted: [L]=SOFTLOCKUP [ 257.797545][T10679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.797557][T10679] Call Trace: [ 257.797564][T10679] [ 257.797572][T10679] dump_stack_lvl+0x100/0x190 [ 257.797600][T10679] should_fail_ex.cold+0x5/0xa [ 257.797624][T10679] _copy_from_user+0x2e/0xd0 [ 257.797648][T10679] kstrtouint_from_user+0xd6/0x1d0 [ 257.797675][T10679] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 257.797702][T10679] ? __lock_acquire+0x4c5/0x1ec0 [ 257.797737][T10679] proc_fail_nth_write+0x83/0x220 [ 257.797764][T10679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.797796][T10679] vfs_write+0x2aa/0x1050 [ 257.797823][T10679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.797851][T10679] ? __pfx_vfs_write+0x10/0x10 [ 257.797873][T10679] ? find_held_lock+0x2b/0x80 [ 257.797900][T10679] ? __fget_files+0x215/0x3d0 [ 257.797931][T10679] ? __fget_files+0x21f/0x3d0 [ 257.797965][T10679] ksys_write+0x12a/0x250 [ 257.797989][T10679] ? __pfx_ksys_write+0x10/0x10 [ 257.798022][T10679] do_int80_emulation+0x166/0x650 [ 257.798053][T10679] asm_int80_emulation+0x1a/0x20 [ 257.798071][T10679] RIP: 0023:0xf71074eb [ 257.798087][T10679] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 257.798105][T10679] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 257.798123][T10679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 257.798135][T10679] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.798145][T10679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.798156][T10679] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.798167][T10679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.798191][T10679] [ 257.876732][ T6085] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 258.076521][ T6085] usb 8-1: Using ep0 maxpacket: 32 [ 258.092200][ T6085] usb 8-1: unable to get BOS descriptor or descriptor too short [ 258.097045][ T6085] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 258.104658][ T6085] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 258.108654][ T6085] usb 8-1: config 8 has no interface number 0 [ 258.110873][ T6085] usb 8-1: config 8 interface 188 has no altsetting 0 [ 258.119056][ T6085] usb 8-1: string descriptor 0 read error: -22 [ 258.122233][ T6085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.169523][ T6085] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 258.189170][ T6085] dw2102: su3000_power_ctrl: 1, initialized 0 [ 258.191423][ T6085] dvb-usb: bulk message failed: -22 (2/0) [ 258.237114][ T6085] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.254796][ T6085] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 258.272558][ T6085] usb 8-1: media controller created [ 258.274349][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 258.286567][ T6085] dw2102: i2c transfer failed. [ 258.301704][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 258.305070][ T6085] dw2102: i2c transfer failed. [ 258.313506][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 258.319298][ T6085] dw2102: i2c transfer failed. [ 258.321436][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 258.323886][ T6085] dw2102: i2c transfer failed. [ 258.325838][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 258.328461][ T6085] dw2102: i2c transfer failed. [ 258.330841][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 258.333510][ T6085] dw2102: i2c transfer failed. [ 258.335621][ T6085] dvb-usb: MAC address: 02:02:02:02:02:02 [ 258.378488][ T6085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.405205][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 258.407757][ T6085] dw2102: command 0x0e transfer failed. [ 258.409542][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 258.411741][ T6085] dw2102: command 0x0e transfer failed. [ 258.726388][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 258.730473][ T6085] dw2102: command 0x0e transfer failed. [ 258.734531][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 258.739593][ T6085] dw2102: command 0x0e transfer failed. [ 258.745255][ T6085] dvb-usb: bulk message failed: -22 (1/0) [ 258.747109][ T6085] dw2102: command 0x51 transfer failed. [ 258.770644][ T6085] DVB: Unable to find symbol ds3000_attach() [ 258.774257][ T6085] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 258.846348][ T6085] rc_core: IR keymap rc-su3000 not found [ 258.848275][ T6085] Registered IR keymap rc-empty [ 258.850457][ T6085] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 258.857074][ T6085] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input77 [ 258.867667][ T6085] dvb-usb: schedule remote query interval to 150 msecs. [ 258.873533][ T6085] dw2102: su3000_power_ctrl: 0, initialized 1 [ 258.875562][ T6085] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 258.885078][ T6085] usb 8-1: USB disconnect, device number 41 [ 258.940056][ T6085] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 259.249755][T10712] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1417'. [ 259.287937][T10717] overlayfs: failed to resolve 'lower': -2 [ 259.320347][T10708] overlayfs: failed to resolve './file0': -2 [ 259.505973][T10723] FAULT_INJECTION: forcing a failure. [ 259.505973][T10723] name failslab, interval 1, probability 0, space 0, times 0 [ 259.510705][T10723] CPU: 1 UID: 0 PID: 10723 Comm: syz.3.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.510724][T10723] Tainted: [L]=SOFTLOCKUP [ 259.510728][T10723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.510734][T10723] Call Trace: [ 259.510738][T10723] [ 259.510743][T10723] dump_stack_lvl+0x100/0x190 [ 259.510762][T10723] should_fail_ex.cold+0x5/0xa [ 259.510776][T10723] should_failslab+0xc2/0x120 [ 259.510788][T10723] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 259.510806][T10723] ? __d_alloc+0x35/0xa50 [ 259.510819][T10723] __d_alloc+0x35/0xa50 [ 259.510831][T10723] d_alloc+0x4a/0x1e0 [ 259.510843][T10723] lookup_one_qstr_excl+0x171/0x250 [ 259.510857][T10723] start_dirop+0x59/0xb0 [ 259.510873][T10723] simple_start_creating+0xf9/0x110 [ 259.510890][T10723] ? __pfx_simple_start_creating+0x10/0x10 [ 259.510907][T10723] ? mntput+0x70/0xa0 [ 259.510921][T10723] ? simple_pin_fs+0xa3/0x190 [ 259.510942][T10723] debugfs_start_creating.part.0+0x9f/0x180 [ 259.510960][T10723] __debugfs_create_file+0x86/0x4d0 [ 259.510978][T10723] debugfs_create_file_full+0x41/0x60 [ 259.510996][T10723] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 259.511014][T10723] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 259.511042][T10723] ? lockdep_init_map_type+0x5c/0x250 [ 259.511057][T10723] ? __pfx_gprs_setup+0x10/0x10 [ 259.511072][T10723] alloc_netdev_mqs+0x314/0x15c0 [ 259.511089][T10723] gprs_attach+0x8f/0x620 [ 259.511104][T10723] pep_setsockopt+0x379/0x4a0 [ 259.511117][T10723] ? __pfx_pep_setsockopt+0x10/0x10 [ 259.511129][T10723] ? aa_sock_opt_perm+0xff/0x1b0 [ 259.511144][T10723] ? sock_common_setsockopt+0x2e/0xf0 [ 259.511159][T10723] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 259.511177][T10723] do_sock_setsockopt+0xf3/0x1d0 [ 259.511201][T10723] __sys_setsockopt+0x119/0x190 [ 259.511225][T10723] __ia32_sys_setsockopt+0xbc/0x160 [ 259.511240][T10723] ? __do_fast_syscall_32+0xb3/0x8b0 [ 259.511255][T10723] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.511268][T10723] __do_fast_syscall_32+0x13a/0x8b0 [ 259.511282][T10723] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.511297][T10723] do_fast_syscall_32+0x32/0x70 [ 259.511318][T10723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.511339][T10723] RIP: 0023:0xf70aefec [ 259.511358][T10723] Code: Unable to access opcode bytes at 0xf70aefc2. [ 259.511365][T10723] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 259.511377][T10723] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000113 [ 259.511384][T10723] RDX: 0000000000000001 RSI: 0000000080000140 RDI: 0000000000000004 [ 259.511391][T10723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.511397][T10723] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.511403][T10723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.511416][T10723] [ 259.987614][T10728] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 259.989700][T10728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.993079][T10728] vhci_hcd vhci_hcd.0: Device attached [ 260.006452][T10731] vhci_hcd: connection closed [ 260.007405][ T5812] vhci_hcd vhci_hcd.0: stop threads [ 260.010841][ T5812] vhci_hcd vhci_hcd.0: release socket [ 260.012804][ T5812] vhci_hcd vhci_hcd.0: disconnect device [ 260.037396][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.041494][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.197772][T10741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1423'. [ 260.200783][T10741] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 260.211133][T10741] bond26: option mode: invalid value (9) [ 260.213956][T10741] bond26 (unregistering): Released all slaves [ 260.267325][T10747] netlink: 'syz.3.1423': attribute type 10 has an invalid length. [ 260.270334][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1423'. [ 260.277190][T10747] dummy0: left allmulticast mode [ 260.279087][T10747] bridge2: port 1(dummy0) entered disabled state [ 260.286325][ T852] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 260.456299][ T852] usb 6-1: Using ep0 maxpacket: 8 [ 260.458450][ T852] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.462123][ T852] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 260.462561][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 260.464672][ T852] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.464686][ T852] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.464699][ T852] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.464711][ T852] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.482718][ T852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.628499][T10751] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1425'. [ 260.690087][ T852] usb 6-1: usb_control_msg returned -32 [ 260.691889][ T852] usbtmc 6-1:16.0: can't read capabilities [ 260.742606][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.746869][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.049023][T10760] FAULT_INJECTION: forcing a failure. [ 261.049023][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.054229][T10760] CPU: 2 UID: 0 PID: 10760 Comm: syz.1.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.054255][T10760] Tainted: [L]=SOFTLOCKUP [ 261.054261][T10760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.054271][T10760] Call Trace: [ 261.054292][T10760] [ 261.054300][T10760] dump_stack_lvl+0x100/0x190 [ 261.054329][T10760] should_fail_ex.cold+0x5/0xa [ 261.054374][T10760] _copy_to_user+0x32/0xd0 [ 261.054400][T10760] simple_read_from_buffer+0xcb/0x170 [ 261.054429][T10760] proc_fail_nth_read+0x1af/0x230 [ 261.054455][T10760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.054483][T10760] ? rw_verify_area+0xce/0x6d0 [ 261.054505][T10760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.054529][T10760] vfs_read+0x1e4/0xb40 [ 261.054563][T10760] ? __pfx_vfs_read+0x10/0x10 [ 261.054585][T10760] ? find_held_lock+0x2b/0x80 [ 261.054603][T10760] ? __fget_files+0x215/0x3d0 [ 261.054634][T10760] ? __fget_files+0x21f/0x3d0 [ 261.054666][T10760] ksys_read+0x12a/0x250 [ 261.054690][T10760] ? __pfx_ksys_read+0x10/0x10 [ 261.054722][T10760] do_int80_emulation+0x166/0x650 [ 261.054749][T10760] asm_int80_emulation+0x1a/0x20 [ 261.054767][T10760] RIP: 0023:0xf71f74eb [ 261.054782][T10760] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 261.054798][T10760] RSP: 002b:00000000f548c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 261.054816][T10760] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548c5d0 [ 261.054827][T10760] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 261.054837][T10760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.054848][T10760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 261.054858][T10760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.054882][T10760] [ 261.143608][ T5842] usb 6-1: USB disconnect, device number 44 [ 261.275973][ T43] audit: type=1326 audit(1787645785.598:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.1429" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 261.287921][ T43] audit: type=1326 audit(1787645785.618:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.1.1430" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befec code=0x0 [ 261.895289][T10783] syzkaller0: entered promiscuous mode [ 261.897136][T10783] syzkaller0: entered allmulticast mode [ 261.900533][T10783] FAULT_INJECTION: forcing a failure. [ 261.900533][T10783] name failslab, interval 1, probability 0, space 0, times 0 [ 261.905227][T10783] CPU: 1 UID: 0 PID: 10783 Comm: syz.3.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.905246][T10783] Tainted: [L]=SOFTLOCKUP [ 261.905250][T10783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.905256][T10783] Call Trace: [ 261.905261][T10783] [ 261.905266][T10783] dump_stack_lvl+0x100/0x190 [ 261.905285][T10783] should_fail_ex.cold+0x5/0xa [ 261.905300][T10783] should_failslab+0xc2/0x120 [ 261.905313][T10783] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 261.905331][T10783] ? __alloc_skb+0x5b7/0x710 [ 261.905344][T10783] ? __alloc_skb+0x140/0x710 [ 261.905358][T10783] __alloc_skb+0x140/0x710 [ 261.905370][T10783] ? __alloc_skb+0x5b7/0x710 [ 261.905382][T10783] ? __pfx___alloc_skb+0x10/0x10 [ 261.905394][T10783] ? find_held_lock+0x2b/0x80 [ 261.905404][T10783] ? process_measurement+0x4c8/0x2350 [ 261.905419][T10783] ? process_measurement+0x4c8/0x2350 [ 261.905441][T10783] alloc_skb_with_frags+0xdd/0x760 [ 261.905456][T10783] ? up_write+0x2dc/0x5b0 [ 261.905474][T10783] sock_alloc_send_pskb+0x801/0x980 [ 261.905487][T10783] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 261.905508][T10783] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 261.905520][T10783] ? find_held_lock+0x2b/0x80 [ 261.905530][T10783] ? dev_get_by_index+0x180/0x380 [ 261.905543][T10783] ? dev_get_by_index+0x180/0x380 [ 261.905559][T10783] packet_sendmsg+0x1ed7/0x4f00 [ 261.905577][T10783] ? __pfx___might_resched+0x10/0x10 [ 261.905593][T10783] ? aa_sk_perm+0x30c/0xaa0 [ 261.905606][T10783] ? __pfx_aa_sk_perm+0x10/0x10 [ 261.905617][T10783] ? __pfx_packet_sendmsg+0x10/0x10 [ 261.905633][T10783] ? apparmor_socket_sendmsg+0x15b/0x270 [ 261.905651][T10783] ____sys_sendmsg+0xa4d/0xbe0 [ 261.905668][T10783] ? __pfx_packet_sendmsg+0x10/0x10 [ 261.905687][T10783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.905723][T10783] ___sys_sendmsg+0x190/0x1e0 [ 261.905752][T10783] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.905790][T10783] ? find_held_lock+0x2b/0x80 [ 261.905822][T10783] __sys_sendmsg+0x160/0x210 [ 261.905844][T10783] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.905869][T10783] ? __pfx_ksys_write+0x10/0x10 [ 261.905888][T10783] __do_fast_syscall_32+0x13a/0x8b0 [ 261.905904][T10783] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.905918][T10783] do_fast_syscall_32+0x32/0x70 [ 261.905936][T10783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.905950][T10783] RIP: 0023:0xf70aefec [ 261.905964][T10783] Code: Unable to access opcode bytes at 0xf70aefc2. [ 261.905969][T10783] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 261.905981][T10783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 261.905988][T10783] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.905995][T10783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.906001][T10783] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 261.906008][T10783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.906022][T10783] [ 262.102030][T10791] syzkaller0: entered promiscuous mode [ 262.104067][T10791] syzkaller0: entered allmulticast mode [ 262.141329][T10795] overlayfs: failed to resolve 'lower': -2 [ 262.170905][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 262.425367][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 262.526294][ T6085] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 262.696824][ T6085] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.700832][ T6085] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.705431][ T6085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 262.710186][ T6085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 262.714636][ T6085] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.718866][ T6085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.722607][ T6085] usb 7-1: config 0 descriptor?? [ 262.725249][T10807] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.747576][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.752598][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.756459][T10829] FAULT_INJECTION: forcing a failure. [ 262.756459][T10829] name failslab, interval 1, probability 0, space 0, times 0 [ 262.760355][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.0.1450 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.760381][T10829] Tainted: [L]=SOFTLOCKUP [ 262.760388][T10829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.760398][T10829] Call Trace: [ 262.760404][T10829] [ 262.760411][T10829] dump_stack_lvl+0x100/0x190 [ 262.760439][T10829] should_fail_ex.cold+0x5/0xa [ 262.760477][T10829] should_failslab+0xc2/0x120 [ 262.760497][T10829] kmem_cache_alloc_noprof+0x92/0x6a0 [ 262.760525][T10829] ? alloc_empty_file+0x5b/0x1c0 [ 262.760548][T10829] alloc_empty_file+0x5b/0x1c0 [ 262.760567][T10829] path_openat+0xdb/0x2440 [ 262.760586][T10829] ? __pfx_path_openat+0x10/0x10 [ 262.760609][T10829] do_file_open+0x20e/0x430 [ 262.760628][T10829] ? __pfx_do_file_open+0x10/0x10 [ 262.760661][T10829] ? _raw_spin_unlock+0x28/0x50 [ 262.760680][T10829] ? alloc_fd+0x471/0x7a0 [ 262.760713][T10829] do_sys_openat2+0x10f/0x1e0 [ 262.760734][T10829] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.760763][T10829] __ia32_compat_sys_openat+0x12d/0x210 [ 262.760785][T10829] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 262.760805][T10829] ? ksys_write+0x1ac/0x250 [ 262.760837][T10829] do_int80_emulation+0x166/0x650 [ 262.760865][T10829] asm_int80_emulation+0x1a/0x20 [ 262.760882][T10829] RIP: 0023:0xf71474eb [ 262.760906][T10829] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 262.760924][T10829] RSP: 002b:00000000f53fd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 262.760942][T10829] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53fd100 [ 262.760953][T10829] RDX: 0000000000002181 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.760964][T10829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.760973][T10829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.760984][T10829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.761007][T10829] [ 262.909040][T10831] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 262.912137][T10831] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 263.161455][ T6085] usbhid 7-1:0.0: can't add hid device: -71 [ 263.163426][ T6085] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 263.167773][ T5884] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 263.167791][ T6085] usb 7-1: USB disconnect, device number 38 [ 263.294945][T10841] overlayfs: failed to resolve 'lower': -2 [ 263.351245][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 263.353480][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 263.360248][ T5884] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 263.365052][ T5884] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 263.368957][ T5884] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 263.373471][ T5884] usb 6-1: config 129 has no interface number 0 [ 263.375172][ T5884] usb 6-1: config 129 has no interface number 1 [ 263.379526][ T5884] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 263.383588][ T5884] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 263.391744][ T5884] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 263.399321][ T5884] usb 6-1: config 129 interface 135 has no altsetting 0 [ 263.406843][ T5884] usb 6-1: config 129 interface 5 has no altsetting 0 [ 263.413658][ T5884] usb 6-1: string descriptor 0 read error: -22 [ 263.415642][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.434080][ T5884] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.436484][ T5884] usb 6-1: MIDIStreaming interface descriptor not found [ 263.469251][T10839] nd_pmem pfn0.0: probe with driver nd_pmem failed with error -16 [ 263.562821][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 263.569593][T10849] lo speed is unknown, defaulting to 1000 [ 263.572046][T10849] wg2 speed is unknown, defaulting to 1000 [ 263.635104][ T5943] usb 6-1: USB disconnect, device number 45 [ 263.836306][ T6085] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 263.986696][ T6085] usb 8-1: Using ep0 maxpacket: 32 [ 263.990599][ T6085] usb 8-1: unable to get BOS descriptor or descriptor too short [ 263.993116][ T6085] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 263.997119][ T6085] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 263.999715][ T6085] usb 8-1: config 8 has no interface number 0 [ 264.001594][ T6085] usb 8-1: config 8 interface 188 has no altsetting 0 [ 264.010188][ T6085] usb 8-1: string descriptor 0 read error: -22 [ 264.012485][ T6085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.037510][ T6085] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 264.040988][ T6085] dw2102: su3000_power_ctrl: 1, initialized 0 [ 264.042926][ T6085] dvb-usb: bulk message failed: -22 (2/0) [ 264.052895][ T6085] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.058418][ T6085] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 264.061329][ T6085] usb 8-1: media controller created [ 264.063110][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 264.065027][ T6085] dw2102: i2c transfer failed. [ 264.067204][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 264.069060][ T6085] dw2102: i2c transfer failed. [ 264.070689][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 264.072665][ T6085] dw2102: i2c transfer failed. [ 264.074295][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 264.076203][ T6085] dw2102: i2c transfer failed. [ 264.077776][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 264.079684][ T6085] dw2102: i2c transfer failed. [ 264.081250][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 264.083274][ T6085] dw2102: i2c transfer failed. [ 264.085206][ T6085] dvb-usb: MAC address: 02:02:02:02:02:02 [ 264.091647][ T6085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.108920][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 264.110715][ T6085] dw2102: command 0x0e transfer failed. [ 264.119235][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 264.120997][ T6085] dw2102: command 0x0e transfer failed. [ 264.356304][T10873] overlayfs: failed to resolve 'lower': -2 [ 264.433547][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 264.436502][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 264.436520][ T6085] dw2102: command 0x0e transfer failed. [ 264.436528][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 264.436810][ T6085] dw2102: command 0x0e transfer failed. [ 264.436816][ T6085] dvb-usb: bulk message failed: -22 (1/0) [ 264.436823][ T6085] dw2102: command 0x51 transfer failed. [ 264.485107][T10886] overlayfs: failed to resolve 'lower': -2 [ 264.527894][ T6085] DVB: Unable to find symbol ds3000_attach() [ 264.530122][ T6085] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 264.636441][ T6085] rc_core: IR keymap rc-su3000 not found [ 264.652438][ T6085] Registered IR keymap rc-empty [ 264.671605][ T6085] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 264.695945][ T6085] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input78 [ 264.735235][ T6085] dvb-usb: schedule remote query interval to 150 msecs. [ 264.741279][ T6085] dw2102: su3000_power_ctrl: 0, initialized 1 [ 264.743476][ T6085] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 264.756650][ T6085] usb 8-1: USB disconnect, device number 42 [ 264.999156][ T6085] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 265.702078][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 265.800525][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.805476][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.865530][T10925] lo speed is unknown, defaulting to 1000 [ 265.869880][T10925] wg2 speed is unknown, defaulting to 1000 [ 265.897113][T10928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1480'. [ 265.961357][T10929] bond23 (unregistering): Released all slaves [ 266.036846][T10936] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 266.039554][T10937] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 266.042561][T10936] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1483'. [ 266.200732][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 266.210021][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 266.352963][T10951] FAULT_INJECTION: forcing a failure. [ 266.352963][T10951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.361060][T10951] CPU: 1 UID: 0 PID: 10951 Comm: syz.3.1484 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.361080][T10951] Tainted: [L]=SOFTLOCKUP [ 266.361084][T10951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.361091][T10951] Call Trace: [ 266.361095][T10951] [ 266.361100][T10951] dump_stack_lvl+0x100/0x190 [ 266.361118][T10951] should_fail_ex.cold+0x5/0xa [ 266.361130][T10951] ? prepare_alloc_pages+0x16d/0x5b0 [ 266.361156][T10951] should_fail_alloc_page+0xeb/0x140 [ 266.361169][T10951] prepare_alloc_pages+0x1f0/0x5b0 [ 266.361183][T10951] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 266.361201][T10951] ? __lock_acquire+0x4c5/0x1ec0 [ 266.361219][T10951] ? __lock_acquire+0x4c5/0x1ec0 [ 266.361232][T10951] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.361249][T10951] ? __lock_acquire+0x4c5/0x1ec0 [ 266.361265][T10951] ? __lock_acquire+0x4c5/0x1ec0 [ 266.361295][T10951] ? find_held_lock+0x2b/0x80 [ 266.361307][T10951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.361321][T10951] ? policy_nodemask+0xed/0x4f0 [ 266.361335][T10951] alloc_pages_mpol+0x201/0x550 [ 266.361348][T10951] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 266.361359][T10951] ? unwind_get_return_address+0x59/0xa0 [ 266.361371][T10951] ? arch_stack_walk+0xa6/0xf0 [ 266.361384][T10951] folio_alloc_mpol_noprof+0x36/0x260 [ 266.361399][T10951] shmem_alloc_folio+0x135/0x160 [ 266.361423][T10951] shmem_alloc_and_add_folio+0x371/0xd40 [ 266.361443][T10951] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 266.361459][T10951] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 266.361477][T10951] shmem_get_folio_gfp+0x75b/0x1980 [ 266.361494][T10951] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 266.361516][T10951] ? filemap_map_pages+0x112c/0x2020 [ 266.361530][T10951] shmem_fault+0x1fb/0xa30 [ 266.361545][T10951] ? __pfx_shmem_fault+0x10/0x10 [ 266.361559][T10951] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 266.361578][T10951] ? __pfx_filemap_map_pages+0x10/0x10 [ 266.361592][T10951] ? find_held_lock+0x2b/0x80 [ 266.361603][T10951] ? __pfx_filemap_map_pages+0x10/0x10 [ 266.361627][T10951] __do_fault+0x10b/0x440 [ 266.361645][T10951] do_fault+0xb3f/0x1830 [ 266.361656][T10951] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 266.361671][T10951] ? __pfx_do_fault+0x10/0x10 [ 266.361681][T10951] ? pgd_none+0x9f/0xe0 [ 266.361694][T10951] ? __pfx_pgd_none+0x10/0x10 [ 266.361708][T10951] ? find_held_lock+0x2b/0x80 [ 266.361719][T10951] __handle_mm_fault+0x150b/0x2f60 [ 266.361746][T10951] ? __pfx___handle_mm_fault+0x10/0x10 [ 266.361761][T10951] ? __pfx_mt_find+0x10/0x10 [ 266.361778][T10951] ? irqentry_exit+0x24d/0xa10 [ 266.361799][T10951] handle_mm_fault+0x37b/0xa30 [ 266.361816][T10951] do_user_addr_fault+0x745/0x12f0 [ 266.361830][T10951] exc_page_fault+0x6f/0xd0 [ 266.361843][T10951] asm_exc_page_fault+0x26/0x30 [ 266.361853][T10951] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 266.361869][T10951] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 f2 ff af fc 48 83 fd 07 0f 86 bb 00 00 00 e8 43 05 b0 fc <4d> 8b 24 1e e8 3a 05 b0 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 266.361879][T10951] RSP: 0018:ffffc9000625fe48 EFLAGS: 00050293 [ 266.361888][T10951] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 266.361895][T10951] RDX: ffff88804cfb8000 RSI: ffffffff855a7b0d RDI: ffff88804cfb8000 [ 266.361902][T10951] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 266.361908][T10951] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 266.361914][T10951] R13: ffff88804c38a418 R14: 0000000080000140 R15: 00000000000000a8 [ 266.361925][T10951] ? strncpy_from_user+0xfd/0x2d0 [ 266.361953][T10951] ? strncpy_from_user+0xfd/0x2d0 [ 266.361969][T10951] do_getname+0x78/0x390 [ 266.361983][T10951] __ia32_sys_mkdirat+0x77/0xc0 [ 266.361994][T10951] __do_fast_syscall_32+0x13a/0x8b0 [ 266.362008][T10951] ? lockdep_hardirqs_on+0x7d/0x110 [ 266.362026][T10951] do_fast_syscall_32+0x32/0x70 [ 266.362047][T10951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.362079][T10951] RIP: 0023:0xf70aefec [ 266.362093][T10951] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 266.362107][T10951] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 266.362121][T10951] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 266.362131][T10951] RDX: 00000000000001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.362138][T10951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.362144][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.362150][T10951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.362163][T10951] [ 266.637971][T10956] NILFS (nbd3): device size too small [ 266.654940][T10958] random: crng reseeded on system resumption [ 266.756270][ T852] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 266.917007][ T852] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.921752][ T852] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.926570][ T852] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.930348][ T852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.936175][T10953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.942742][ T852] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.956442][ T6085] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 267.126947][ T6085] usb 8-1: Using ep0 maxpacket: 32 [ 267.139973][ T6085] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.158382][ T6085] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.171074][ T6085] usb 8-1: config 0 has no interfaces? [ 267.184519][ T6085] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 267.192031][ T6085] usb 8-1: Product: syz [ 267.195953][ T6085] usb 8-1: Manufacturer: syz [ 267.200634][ T6085] usb 8-1: SerialNumber: syz [ 267.238592][ T6085] usb 8-1: config 0 descriptor?? [ 268.719377][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'. [ 268.762961][ T852] usb 8-1: USB disconnect, device number 43 [ 269.003499][T10970] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1491'. [ 269.068252][T10975] overlayfs: failed to resolve 'lower': -2 [ 269.365764][T10983] overlayfs: failed to resolve 'lower': -2 [ 269.368806][T10979] ehci-pci 0000:00:1d.7: remove, state 1 [ 269.370361][T10984] overlayfs: failed to resolve 'lower': -2 [ 269.372083][T10979] usb usb2: USB disconnect, device number 1 [ 269.374410][T10979] usb 2-1: USB disconnect, device number 2 [ 269.547311][T10979] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 269.796382][ T9] usb 1-1: new full-speed USB device number 3 using uhci_hcd [ 269.894453][ T6050] usb 7-1: USB disconnect, device number 39 [ 269.896901][ T852] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 269.954008][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 269.959239][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 269.975940][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'. [ 269.982771][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 269.986007][ T9] usb 1-1: Product: QEMU USB Tablet [ 269.989471][ T9] usb 1-1: Manufacturer: QEMU [ 269.993367][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 270.021343][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0007/input/input79 [ 270.046410][ T852] usb 6-1: Using ep0 maxpacket: 32 [ 270.050035][ T852] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.052430][ T852] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 270.060510][ T852] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 270.063236][ T852] usb 6-1: config 8 has no interface number 0 [ 270.067373][ T852] usb 6-1: config 8 interface 188 has no altsetting 0 [ 270.074250][ T852] usb 6-1: string descriptor 0 read error: -22 [ 270.077176][ T852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.087651][ T852] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 270.090221][ T852] dw2102: su3000_power_ctrl: 1, initialized 0 [ 270.092103][ T852] dvb-usb: bulk message failed: -22 (2/0) [ 270.102861][ T852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.105035][ T9] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 270.106375][ T852] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 270.113509][ T852] usb 6-1: media controller created [ 270.115140][ T852] dvb-usb: bulk message failed: -22 (6/0) [ 270.117270][ T852] dw2102: i2c transfer failed. [ 270.118807][ T852] dvb-usb: bulk message failed: -22 (6/0) [ 270.120614][ T852] dw2102: i2c transfer failed. [ 270.122119][ T852] dvb-usb: bulk message failed: -22 (6/0) [ 270.124072][ T852] dw2102: i2c transfer failed. [ 270.125570][ T852] dvb-usb: bulk message failed: -22 (6/0) [ 270.127778][ T852] dw2102: i2c transfer failed. [ 270.129260][ T852] dvb-usb: bulk message failed: -22 (6/0) [ 270.131039][ T852] dw2102: i2c transfer failed. [ 270.132523][ T852] dvb-usb: bulk message failed: -22 (6/0) [ 270.134432][ T852] dw2102: i2c transfer failed. [ 270.135930][ T852] dvb-usb: MAC address: 02:02:02:02:02:02 [ 270.144424][ T852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.162020][T10987] usb 1-1: USB disconnect, device number 3 [ 270.164990][ T852] dvb-usb: bulk message failed: -22 (3/0) [ 270.166816][ T852] dw2102: command 0x0e transfer failed. [ 270.170266][ T852] dvb-usb: bulk message failed: -22 (3/0) [ 270.172093][ T852] dw2102: command 0x0e transfer failed. [ 270.248377][T11011] fido_id[11011]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 270.476383][ T852] dvb-usb: bulk message failed: -22 (3/0) [ 270.478261][ T852] dw2102: command 0x0e transfer failed. [ 270.480055][ T852] dvb-usb: bulk message failed: -22 (3/0) [ 270.481853][ T852] dw2102: command 0x0e transfer failed. [ 270.483730][ T852] dvb-usb: bulk message failed: -22 (1/0) [ 270.488107][ T852] dw2102: command 0x51 transfer failed. [ 270.495993][T10987] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 270.504559][T10987] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 270.510889][T10987] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 270.522888][ T852] DVB: Unable to find symbol ds3000_attach() [ 270.526377][T10987] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 270.526911][ T852] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 270.531129][T10987] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 270.541174][T10987] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 270.545957][T10987] usb usb2: Product: EHCI Host Controller [ 270.550090][T10987] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 270.555405][T10987] usb usb2: SerialNumber: 0000:00:1d.7 [ 270.571476][T10987] hub 2-0:1.0: USB hub found [ 270.580894][T10987] hub 2-0:1.0: 6 ports detected [ 270.586261][ T852] rc_core: IR keymap rc-su3000 not found [ 270.587924][ T852] Registered IR keymap rc-empty [ 270.591175][ T852] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 270.595212][ T852] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input80 [ 270.619546][ T852] dvb-usb: schedule remote query interval to 150 msecs. [ 270.629586][ T852] dw2102: su3000_power_ctrl: 0, initialized 1 [ 270.631326][ T852] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 270.645388][ T852] usb 6-1: USB disconnect, device number 46 [ 270.678673][T10987] hub 1-0:1.0: USB hub found [ 270.680940][T10987] hub 1-0:1.0: 2 ports detected [ 270.709755][ T852] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 270.747562][T10987] hub 3-0:1.0: USB hub found [ 270.750072][T10987] hub 3-0:1.0: 2 ports detected [ 270.797037][T10987] hub 4-0:1.0: USB hub found [ 270.807705][T10987] hub 4-0:1.0: 2 ports detected [ 270.908124][ T6050] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 271.099433][ T6050] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 271.126248][ T6050] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 271.129416][ T6050] usb 2-1: Product: QEMU USB Tablet [ 271.131313][ T6050] usb 2-1: Manufacturer: QEMU [ 271.133196][ T6050] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 271.154038][ T6050] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input81 [ 271.234669][ T6050] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 271.579874][T11021] rdma_rxe: rxe_newlink: failed to add wg2 [ 271.631031][ T43] audit: type=1326 audit(1787645794.960:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.2.1507" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 271.692059][T11028] 8021q: adding VLAN 0 to HW filter on device bond19 [ 271.744761][T11030] netlink: 'syz.3.1508': attribute type 10 has an invalid length. [ 271.748151][T11030] dummy0: left promiscuous mode [ 271.754707][T11030] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 271.764907][T11030] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 271.771140][T11030] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 271.778514][T11030] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 271.790484][T11030] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 271.961027][ T43] audit: type=1400 audit(1787645795.290:277): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11036 comm="syz.0.1510" [ 272.001630][T11039] bond0: (slave bridge0): Releasing backup interface [ 272.011136][T11039] bond0: (slave dummy0): Releasing backup interface [ 272.016947][T11039] bridge_slave_0: left allmulticast mode [ 272.018749][T11039] bridge_slave_0: left promiscuous mode [ 272.020800][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.024596][T11039] bridge_slave_1: left allmulticast mode [ 272.026698][T11039] bridge_slave_1: left promiscuous mode [ 272.028522][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.035591][T11039] bond0: (slave bond_slave_0): Releasing backup interface [ 272.040941][T11039] bond0: (slave bond_slave_1): Releasing backup interface [ 272.044896][T11039] team0: Port device team_slave_0 removed [ 272.048156][T11039] team0: Port device team_slave_1 removed [ 272.050123][T11039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.052812][T11039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.059563][T11039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.427304][ T3263] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 272.586880][ T3263] usb 6-1: Using ep0 maxpacket: 32 [ 272.590850][ T3263] usb 6-1: unable to get BOS descriptor or descriptor too short [ 272.593927][ T3263] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 272.598610][ T3263] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 272.601681][ T3263] usb 6-1: config 8 has no interface number 0 [ 272.603502][ T3263] usb 6-1: config 8 interface 188 has no altsetting 0 [ 272.607741][ T3263] usb 6-1: string descriptor 0 read error: -22 [ 272.609612][ T3263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.618532][ T3263] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 272.623078][ T3263] dw2102: su3000_power_ctrl: 1, initialized 0 [ 272.625003][ T3263] dvb-usb: bulk message failed: -22 (2/0) [ 272.634894][ T3263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.638476][ T3263] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 272.641194][ T3263] usb 6-1: media controller created [ 272.643230][ T3263] dvb-usb: bulk message failed: -22 (6/0) [ 272.645392][ T3263] dw2102: i2c transfer failed. [ 272.647852][ T3263] dvb-usb: bulk message failed: -22 (6/0) [ 272.650118][ T3263] dw2102: i2c transfer failed. [ 272.652016][ T3263] dvb-usb: bulk message failed: -22 (6/0) [ 272.654248][ T3263] dw2102: i2c transfer failed. [ 272.656403][ T3263] dvb-usb: bulk message failed: -22 (6/0) [ 272.658647][ T3263] dw2102: i2c transfer failed. [ 272.660533][ T3263] dvb-usb: bulk message failed: -22 (6/0) [ 272.662423][ T3263] dw2102: i2c transfer failed. [ 272.664250][ T3263] dvb-usb: bulk message failed: -22 (6/0) [ 272.667071][ T3263] dw2102: i2c transfer failed. [ 272.669022][ T3263] dvb-usb: MAC address: 02:02:02:02:02:02 [ 272.675736][ T3263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.691593][ T3263] dvb-usb: bulk message failed: -22 (3/0) [ 272.694622][ T3263] dw2102: command 0x0e transfer failed. [ 272.697129][ T3263] dvb-usb: bulk message failed: -22 (3/0) [ 272.699240][ T3263] dw2102: command 0x0e transfer failed. [ 272.941177][T11059] overlayfs: failed to resolve 'lower': -2 [ 272.945207][T11061] overlayfs: failed to resolve 'lower': -2 [ 273.006888][ T3263] dvb-usb: bulk message failed: -22 (3/0) [ 273.008700][ T3263] dw2102: command 0x0e transfer failed. [ 273.010435][ T3263] dvb-usb: bulk message failed: -22 (3/0) [ 273.012259][ T3263] dw2102: command 0x0e transfer failed. [ 273.014003][ T3263] dvb-usb: bulk message failed: -22 (1/0) [ 273.015813][ T3263] dw2102: command 0x51 transfer failed. [ 273.036297][ T3263] DVB: Unable to find symbol ds3000_attach() [ 273.040050][ T3263] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 273.096227][ T3263] rc_core: IR keymap rc-su3000 not found [ 273.098157][ T3263] Registered IR keymap rc-empty [ 273.100730][ T3263] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 273.110571][ T3263] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input82 [ 273.120791][ T3263] dvb-usb: schedule remote query interval to 150 msecs. [ 273.125893][ T3263] dw2102: su3000_power_ctrl: 0, initialized 1 [ 273.130609][ T3263] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 273.140733][ T3263] usb 6-1: USB disconnect, device number 47 [ 273.175384][ T3263] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 273.210003][T11074] FAULT_INJECTION: forcing a failure. [ 273.210003][T11074] name failslab, interval 1, probability 0, space 0, times 0 [ 273.213813][T11074] CPU: 3 UID: 0 PID: 11074 Comm: syz.0.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.213831][T11074] Tainted: [L]=SOFTLOCKUP [ 273.213838][T11074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.213845][T11074] Call Trace: [ 273.213850][T11074] [ 273.213854][T11074] dump_stack_lvl+0x100/0x190 [ 273.213872][T11074] should_fail_ex.cold+0x5/0xa [ 273.213885][T11074] should_failslab+0xc2/0x120 [ 273.213898][T11074] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 273.213915][T11074] ? __alloc_skb+0x5b7/0x710 [ 273.213927][T11074] ? __alloc_skb+0x140/0x710 [ 273.213941][T11074] __alloc_skb+0x140/0x710 [ 273.213952][T11074] ? __alloc_skb+0x5b7/0x710 [ 273.213963][T11074] ? __pfx___alloc_skb+0x10/0x10 [ 273.213976][T11074] ? __pfx_nf_tables_abort+0x10/0x10 [ 273.213989][T11074] netlink_ack+0x117/0xb80 [ 273.213999][T11074] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 273.214017][T11074] nfnetlink_rcv_batch+0x1d52/0x2880 [ 273.214038][T11074] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 273.214051][T11074] ? stack_trace_save+0x8e/0xc0 [ 273.214063][T11074] ? __pfx_stack_trace_save+0x10/0x10 [ 273.214075][T11074] ? kasan_save_stack+0x3f/0x50 [ 273.214085][T11074] ? kasan_save_stack+0x30/0x50 [ 273.214094][T11074] ? kasan_save_track+0x14/0x30 [ 273.214103][T11074] ? __kasan_slab_alloc+0x89/0x90 [ 273.214113][T11074] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 273.214147][T11074] ? __nla_parse+0x40/0x60 [ 273.214160][T11074] nfnetlink_rcv+0x3bd/0x440 [ 273.214173][T11074] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 273.214190][T11074] netlink_unicast+0x585/0x850 [ 273.214202][T11074] ? __pfx_netlink_unicast+0x10/0x10 [ 273.214217][T11074] netlink_sendmsg+0x8b0/0xda0 [ 273.214230][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.214242][T11074] ? apparmor_socket_sendmsg+0x15b/0x270 [ 273.214260][T11074] ____sys_sendmsg+0xa4d/0xbe0 [ 273.214274][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.214286][T11074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.214326][T11074] ___sys_sendmsg+0x190/0x1e0 [ 273.214343][T11074] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.214365][T11074] ? find_held_lock+0x2b/0x80 [ 273.214383][T11074] __sys_sendmsg+0x160/0x210 [ 273.214397][T11074] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.214413][T11074] ? __pfx_ksys_write+0x10/0x10 [ 273.214431][T11074] __do_fast_syscall_32+0x13a/0x8b0 [ 273.214445][T11074] ? lockdep_hardirqs_on+0x7d/0x110 [ 273.214460][T11074] do_fast_syscall_32+0x32/0x70 [ 273.214474][T11074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.214488][T11074] RIP: 0023:0xf700efec [ 273.214500][T11074] Code: Unable to access opcode bytes at 0xf700efc2. [ 273.214505][T11074] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 273.214516][T11074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 273.214522][T11074] RDX: 0000000024044010 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.214529][T11074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.214535][T11074] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 273.214541][T11074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.214554][T11074] [ 273.470410][T11085] overlayfs: failed to resolve 'lower': -2 [ 273.500520][ T43] audit: type=1326 audit(1787645796.830:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.2.1522" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 273.576849][T11083] 8021q: adding VLAN 0 to HW filter on device bond20 [ 273.800894][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 273.809675][T11108] overlayfs: failed to resolve 'lower': -2 [ 274.156301][ T5943] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 274.158389][T11125] NILFS (nbd1): device size too small [ 274.209293][ T6050] lo speed is unknown, defaulting to 1000 [ 274.217536][ T6050] syz2: Port: 1 Link DOWN [ 274.301364][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1534'. [ 274.307940][ T5943] usb 8-1: Using ep0 maxpacket: 32 [ 274.314441][ T5943] usb 8-1: unable to get BOS descriptor or descriptor too short [ 274.319821][ T5943] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 274.327534][ T5943] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 274.333040][ T5943] usb 8-1: config 8 has no interface number 0 [ 274.334997][ T5943] usb 8-1: config 8 interface 188 has no altsetting 0 [ 274.351585][ T5943] usb 8-1: string descriptor 0 read error: -22 [ 274.353909][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.394393][ T5943] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 274.397248][ T5943] dw2102: su3000_power_ctrl: 1, initialized 0 [ 274.399238][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 274.405859][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.414829][ T5943] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 274.420320][ T5943] usb 8-1: media controller created [ 274.422171][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 274.423966][ T5943] dw2102: i2c transfer failed. [ 274.425443][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 274.430027][ T5943] dw2102: i2c transfer failed. [ 274.432357][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 274.434510][ T5943] dw2102: i2c transfer failed. [ 274.436301][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 274.437991][ T5943] dw2102: i2c transfer failed. [ 274.439686][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 274.442470][ T5943] dw2102: i2c transfer failed. [ 274.443997][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 274.445796][ T5943] dw2102: i2c transfer failed. [ 274.448190][ T5943] dvb-usb: MAC address: 02:02:02:02:02:02 [ 274.467917][T11131] lo speed is unknown, defaulting to 1000 [ 274.470488][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.472530][T11131] wg2 speed is unknown, defaulting to 1000 [ 274.507545][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 274.509353][ T5943] dw2102: command 0x0e transfer failed. [ 274.512029][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 274.516284][ T6050] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 274.518747][ T5943] dw2102: command 0x0e transfer failed. [ 274.720029][ T6050] usb 6-1: Using ep0 maxpacket: 32 [ 274.738236][ T43] audit: type=1326 audit(1787645798.060:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.2.1537" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 274.749020][ T6050] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.760146][ T6050] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.769462][ T6050] usb 6-1: config 0 has no interfaces? [ 274.774630][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.780230][T11143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.780364][ T6050] usb 6-1: Product: syz [ 274.785277][ T6050] usb 6-1: Manufacturer: syz [ 274.789253][ T6050] usb 6-1: SerialNumber: syz [ 274.824523][ T6050] usb 6-1: config 0 descriptor?? [ 274.826311][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 274.831753][ T5943] dw2102: command 0x0e transfer failed. [ 274.840903][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 274.843147][ T5943] dw2102: command 0x0e transfer failed. [ 274.850516][ T5943] dvb-usb: bulk message failed: -22 (1/0) [ 274.852328][ T5943] dw2102: command 0x51 transfer failed. [ 274.896668][ T5943] DVB: Unable to find symbol ds3000_attach() [ 274.898637][ T5943] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 274.946576][ T5943] rc_core: IR keymap rc-su3000 not found [ 274.948367][ T5943] Registered IR keymap rc-empty [ 274.965013][ T5943] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 274.974595][ T5943] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input83 [ 274.990759][ T5943] dvb-usb: schedule remote query interval to 150 msecs. [ 274.993610][ T5943] dw2102: su3000_power_ctrl: 0, initialized 1 [ 274.995627][ T5943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 275.002863][ T5943] usb 8-1: USB disconnect, device number 44 [ 275.084209][ T5943] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 275.391302][T11158] overlayfs: failed lookup in lower (newroot/381, name='bus', err=-40): overlapping layers [ 275.400295][T11158] input: syz0 as /devices/virtual/input/input84 [ 275.477837][T11159] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1541'. [ 275.643656][T11161] overlayfs: failed to resolve 'lower': -2 [ 275.855329][ T6050] usb 6-1: USB disconnect, device number 48 [ 276.005192][ T43] audit: type=1326 audit(1787645799.330:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.2.1544" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 276.075417][T11167] 8021q: adding VLAN 0 to HW filter on device bond21 [ 276.311898][T11174] ehci-pci 0000:00:1d.7: remove, state 1 [ 276.317837][T11174] usb usb2: USB disconnect, device number 1 [ 276.320269][T11174] usb 2-1: USB disconnect, device number 2 [ 276.476797][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 276.491724][T11174] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 276.734982][ T43] audit: type=1326 audit(1787645800.060:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11183 comm="syz.3.1547" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 276.746301][ T5943] usb 1-1: new full-speed USB device number 4 using uhci_hcd [ 276.807719][T11190] 8021q: adding VLAN 0 to HW filter on device bond26 [ 276.902080][ T5943] usb 1-1: not running at top speed; connect to a high speed hub [ 276.905423][ T5943] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 276.927611][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 276.930421][ T5943] usb 1-1: Product: QEMU USB Tablet [ 276.932123][ T5943] usb 1-1: Manufacturer: QEMU [ 276.933682][ T5943] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 276.936382][ T6050] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 276.950453][ T5943] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input85 [ 276.994986][T11193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1550'. [ 277.009628][ T5943] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 277.087226][ T6050] usb 6-1: Using ep0 maxpacket: 32 [ 277.091527][ T6050] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.106340][ T6050] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 277.111416][ T6050] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 277.114413][ T6050] usb 6-1: config 8 has no interface number 0 [ 277.116723][ T6050] usb 6-1: config 8 interface 188 has no altsetting 0 [ 277.122581][ T6050] usb 6-1: string descriptor 0 read error: -22 [ 277.125267][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.136961][ T6050] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 277.140859][ T6050] dw2102: su3000_power_ctrl: 1, initialized 0 [ 277.143471][ T6050] dvb-usb: bulk message failed: -22 (2/0) [ 277.150377][ T6050] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.154813][ T6050] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 277.158358][ T6050] usb 6-1: media controller created [ 277.160528][ T6050] dvb-usb: bulk message failed: -22 (6/0) [ 277.162912][ T6050] dw2102: i2c transfer failed. [ 277.164856][ T6050] dvb-usb: bulk message failed: -22 (6/0) [ 277.170485][ T6050] dw2102: i2c transfer failed. [ 277.172472][ T6050] dvb-usb: bulk message failed: -22 (6/0) [ 277.174883][ T6050] dw2102: i2c transfer failed. [ 277.176965][ T6050] dvb-usb: bulk message failed: -22 (6/0) [ 277.179336][ T6050] dw2102: i2c transfer failed. [ 277.181336][ T6050] dvb-usb: bulk message failed: -22 (6/0) [ 277.183647][ T6050] dw2102: i2c transfer failed. [ 277.185520][ T6050] dvb-usb: bulk message failed: -22 (6/0) [ 277.188086][ T6050] dw2102: i2c transfer failed. [ 277.189840][ T6050] dvb-usb: MAC address: 02:02:02:02:02:02 [ 277.200959][ T6050] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.216044][ T6050] dvb-usb: bulk message failed: -22 (3/0) [ 277.218499][ T6050] dw2102: command 0x0e transfer failed. [ 277.220820][ T6050] dvb-usb: bulk message failed: -22 (3/0) [ 277.223202][ T6050] dw2102: command 0x0e transfer failed. [ 277.387924][T11198] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 277.405968][T11198] bond20: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 277.526444][ T6050] dvb-usb: bulk message failed: -22 (3/0) [ 277.528618][ T6050] dw2102: command 0x0e transfer failed. [ 277.530949][ T6050] dvb-usb: bulk message failed: -22 (3/0) [ 277.533357][ T6050] dw2102: command 0x0e transfer failed. [ 277.535665][ T6050] dvb-usb: bulk message failed: -22 (1/0) [ 277.538136][ T6050] dw2102: command 0x51 transfer failed. [ 277.568710][ T6050] DVB: Unable to find symbol ds3000_attach() [ 277.571526][ T6050] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 277.636265][ T6050] rc_core: IR keymap rc-su3000 not found [ 277.638678][ T6050] Registered IR keymap rc-empty [ 277.641596][ T6050] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 277.655541][ T6050] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input86 [ 277.667250][ T6050] dvb-usb: schedule remote query interval to 150 msecs. [ 277.676102][ T6050] dw2102: su3000_power_ctrl: 0, initialized 1 [ 277.680272][ T6050] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 277.694716][ T6050] usb 6-1: USB disconnect, device number 49 [ 277.730916][ T6050] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 278.245843][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 278.356362][ T43] audit: type=1326 audit(1787645800.688:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.3.1559" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x0 [ 278.434392][T11225] 8021q: adding VLAN 0 to HW filter on device bond27 [ 278.546708][ T6050] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 278.708002][ T6050] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.40 [ 278.712173][ T6050] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 278.715697][ T6050] usb 6-1: config 1 interface 0 has no altsetting 0 [ 278.719545][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.722097][ T6050] usb 6-1: Product: а [ 278.723449][ T6050] usb 6-1: Manufacturer: à Œ [ 278.724937][ T6050] usb 6-1: SerialNumber: И [ 278.728647][T11220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.787016][T11237] syzkaller0: entered promiscuous mode [ 278.788818][T11237] syzkaller0: entered allmulticast mode [ 278.945382][ T6050] usbhid 6-1:1.0: can't add hid device: -71 [ 278.947626][ T6050] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 278.954983][ T6050] usb 6-1: USB disconnect, device number 50 [ 279.256022][ T6085] Process accounting resumed [ 279.303711][ T43] audit: type=1326 audit(1787645801.628:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.2.1572" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 279.491513][T11247] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 279.606247][ T6085] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 279.748859][T11250] fuse: Unknown parameter 'ÝÜ‚Ø„²‡~ÚÍq—ÌßnJ¡J`…‚ðˆeµèm 'nrÛÀD;À>?‹% L¨+¨fsÀv ¿¨oØ' [ 279.779695][ T6085] usb 8-1: Using ep0 maxpacket: 32 [ 279.786954][ T6085] usb 8-1: unable to get BOS descriptor or descriptor too short [ 279.789643][ T6085] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 279.795989][ T6085] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 279.799288][ T6085] usb 8-1: config 8 has no interface number 0 [ 279.801726][ T6085] usb 8-1: config 8 interface 188 has no altsetting 0 [ 279.807621][ T6085] usb 8-1: string descriptor 0 read error: -22 [ 279.810328][ T6085] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.821688][ T6085] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 279.828575][ T6085] dw2102: su3000_power_ctrl: 1, initialized 0 [ 279.833757][ T6085] dvb-usb: bulk message failed: -22 (2/0) [ 279.855562][ T6085] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.862400][ T6085] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 279.866541][ T6085] usb 8-1: media controller created [ 279.868751][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 279.871161][ T6085] dw2102: i2c transfer failed. [ 279.873083][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 279.875543][ T6085] dw2102: i2c transfer failed. [ 279.883819][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 279.886423][ T6085] dw2102: i2c transfer failed. [ 279.888416][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 279.890823][ T6085] dw2102: i2c transfer failed. [ 279.896085][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 279.901270][ T6085] dw2102: i2c transfer failed. [ 279.903587][ T6085] dvb-usb: bulk message failed: -22 (6/0) [ 279.905907][ T6085] dw2102: i2c transfer failed. [ 279.907805][ T6085] dvb-usb: MAC address: 02:02:02:02:02:02 [ 279.915278][ T6085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.926118][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 279.928008][ T6085] dw2102: command 0x0e transfer failed. [ 279.929877][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 279.931671][ T6085] dw2102: command 0x0e transfer failed. [ 280.196220][ T6050] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 280.249248][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 280.251054][ T6085] dw2102: command 0x0e transfer failed. [ 280.256219][ T6085] dvb-usb: bulk message failed: -22 (3/0) [ 280.258001][ T6085] dw2102: command 0x0e transfer failed. [ 280.261286][ T6085] dvb-usb: bulk message failed: -22 (1/0) [ 280.263144][ T6085] dw2102: command 0x51 transfer failed. [ 280.291410][ T6085] DVB: Unable to find symbol ds3000_attach() [ 280.293929][ T6085] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 280.346292][ T6085] rc_core: IR keymap rc-su3000 not found [ 280.346732][ T6050] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 280.348042][ T6085] Registered IR keymap rc-empty [ 280.348601][ T6085] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 280.355574][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.359092][ T6050] usb 6-1: Product: syz [ 280.360823][ T6050] usb 6-1: Manufacturer: syz [ 280.362999][ T6085] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input87 [ 280.365280][ T6050] usb 6-1: SerialNumber: syz [ 280.367241][ T6085] dvb-usb: schedule remote query interval to 150 msecs. [ 280.370011][ T6085] dw2102: su3000_power_ctrl: 0, initialized 1 [ 280.371797][ T6085] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 280.534866][ T6085] dvb-usb: bulk message failed: -22 (1/0) [ 280.537311][ T6085] dw2102: i2c transfer failed. [ 280.568393][T11243] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 280.571418][ T3263] usb 8-1: USB disconnect, device number 45 [ 280.608144][ T3263] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 280.614524][T11253] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 280.635286][T11265] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 280.659000][T11265] bond20: (slave veth0_to_bond): Releasing active interface [ 280.665858][T11265] bond21: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 280.670012][ T6050] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 280.674317][ T6050] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 280.678333][ T6050] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.689826][ T6050] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 280.696356][ T6050] usb 6-1: USB disconnect, device number 51 [ 280.752310][ T43] audit: type=1800 audit(1787645803.078:284): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1574" name="console" dev="configfs" ino=33390 res=0 errno=0 [ 281.114382][T11281] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 281.210041][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 281.261603][ T43] audit: type=1326 audit(1787645803.588:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11282 comm="syz.2.1578" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 281.338882][T11283] 8021q: adding VLAN 0 to HW filter on device bond22 [ 281.380571][T11294] overlayfs: failed to resolve 'lower': -2 [ 281.416121][T11295] tmpfs: Unknown parameter 'nr_inode½' [ 281.513153][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 281.549396][T11295] lo speed is unknown, defaulting to 1000 [ 281.554890][T11295] wg2 speed is unknown, defaulting to 1000 [ 281.666438][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 281.671956][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.694429][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.700577][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.706507][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.785716][ T9] usb 6-1: config 0 descriptor?? [ 281.797907][T11303] overlayfs: failed to resolve 'lower': -2 [ 281.819687][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 282.074001][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.078351][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.414228][T11312] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1580'. [ 282.419095][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 282.697372][T11318] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 282.845013][T11321] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1586'. [ 282.956247][ T5943] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 283.021508][T11327] lo speed is unknown, defaulting to 1000 [ 283.025798][T11327] wg2 speed is unknown, defaulting to 1000 [ 283.096371][ T5943] usb 7-1: device descriptor read/64, error -71 [ 283.336258][ T5943] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 283.431268][T11340] usb 5-1: USB disconnect, device number 33 [ 283.446413][T11340] usblp0: removed [ 283.466612][ T5943] usb 7-1: device descriptor read/64, error -71 [ 283.570673][T11347] overlayfs: failed to resolve 'lower': -2 [ 283.576779][ T5943] usb usb7-port1: attempt power cycle [ 283.849223][T11355] overlayfs: failed to resolve 'lower': -2 [ 283.916227][ T5943] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 283.936690][ T5943] usb 7-1: device descriptor read/8, error -71 [ 284.176416][ T5943] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 284.196758][ T5943] usb 7-1: device descriptor read/8, error -71 [ 284.275839][ T9] usb 6-1: USB disconnect, device number 52 [ 284.306491][ T5943] usb usb7-port1: unable to enumerate USB device [ 284.451855][ T43] audit: type=1326 audit(1787645806.778:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.0.1593" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 284.512981][T11364] 8021q: adding VLAN 0 to HW filter on device bond22 [ 284.606376][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 284.756335][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 284.760153][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.763581][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 284.768051][ T9] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 284.770657][ T9] usb 6-1: config 8 has no interface number 0 [ 284.772542][ T9] usb 6-1: config 8 interface 188 has no altsetting 0 [ 284.777019][ T9] usb 6-1: string descriptor 0 read error: -22 [ 284.779004][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.784718][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 284.787607][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 284.789530][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 284.792792][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.796078][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 284.798906][ T9] usb 6-1: media controller created [ 284.800535][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 284.802329][ T9] dw2102: i2c transfer failed. [ 284.803823][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 284.805565][ T9] dw2102: i2c transfer failed. [ 284.807224][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 284.809058][ T9] dw2102: i2c transfer failed. [ 284.810581][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 284.812348][ T9] dw2102: i2c transfer failed. [ 284.813764][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 284.815517][ T9] dw2102: i2c transfer failed. [ 284.817103][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 284.818861][ T9] dw2102: i2c transfer failed. [ 284.820386][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 284.826857][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.835918][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 284.837746][ T9] dw2102: command 0x0e transfer failed. [ 284.839512][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 284.841347][ T9] dw2102: command 0x0e transfer failed. [ 285.132412][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 285.146506][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 285.148431][ T9] dw2102: command 0x0e transfer failed. [ 285.150183][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 285.151936][ T9] dw2102: command 0x0e transfer failed. [ 285.153642][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 285.155425][ T9] dw2102: command 0x51 transfer failed. [ 285.162822][ T43] audit: type=1326 audit(1787645807.488:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.171104][ T43] audit: type=1326 audit(1787645807.488:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.177923][ T9] DVB: Unable to find symbol ds3000_attach() [ 285.178471][ T43] audit: type=1326 audit(1787645807.488:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.179780][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 285.187982][ T43] audit: type=1326 audit(1787645807.488:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.198525][ T43] audit: type=1326 audit(1787645807.488:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.198550][ T43] audit: type=1326 audit(1787645807.488:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.198570][ T43] audit: type=1326 audit(1787645807.488:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.198590][ T43] audit: type=1326 audit(1787645807.488:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.198613][ T43] audit: type=1326 audit(1787645807.488:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.0.1598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 285.236280][ T9] rc_core: IR keymap rc-su3000 not found [ 285.238147][ T9] Registered IR keymap rc-empty [ 285.240229][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 285.248608][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input88 [ 285.255554][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 285.257803][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 285.259690][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 285.264869][ T9] usb 6-1: USB disconnect, device number 53 [ 285.283553][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 285.290709][T11390] overlayfs: failed to resolve 'lower': -2 [ 285.329533][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.332894][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.412706][T11396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1603'. [ 285.421758][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 285.557382][T11399] Process accounting resumed [ 285.761245][T11403] 8021q: adding VLAN 0 to HW filter on device bond28 [ 285.811609][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 285.967085][T11421] syzkaller0: entered promiscuous mode [ 285.969585][T11421] syzkaller0: entered allmulticast mode [ 285.990378][T11421] tipc: Enabled bearer , priority 0 [ 285.994861][T11418] tipc: Resetting bearer [ 286.005694][T11418] tipc: Disabling bearer [ 286.206225][ T6050] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 286.326278][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 286.366942][ T6050] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 286.371312][ T6050] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 286.376479][ T6050] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 286.382995][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.386501][ T6050] usb 7-1: Product: syz [ 286.388271][ T6050] usb 7-1: Manufacturer: syz [ 286.390298][ T6050] usb 7-1: SerialNumber: syz [ 286.397678][ T6050] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 286.405862][ T6050] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 286.412763][ T6050] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 286.476379][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 286.481857][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 286.488872][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 286.495183][ T9] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 286.499097][ T9] usb 6-1: config 8 has no interface number 0 [ 286.503690][ T9] usb 6-1: config 8 interface 188 has no altsetting 0 [ 286.510919][ T9] usb 6-1: string descriptor 0 read error: -22 [ 286.514147][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.532224][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 286.539854][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 286.541807][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 286.549328][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.556610][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 286.565528][ T9] usb 6-1: media controller created [ 286.567592][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 286.569483][ T9] dw2102: i2c transfer failed. [ 286.571014][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 286.572762][ T9] dw2102: i2c transfer failed. [ 286.574346][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 286.576354][ T9] dw2102: i2c transfer failed. [ 286.577945][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 286.579803][ T9] dw2102: i2c transfer failed. [ 286.581326][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 286.583129][ T9] dw2102: i2c transfer failed. [ 286.584720][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 286.586953][ T9] dw2102: i2c transfer failed. [ 286.588436][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 286.595228][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.608062][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 286.610091][ T9] dw2102: command 0x0e transfer failed. [ 286.611833][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 286.613617][ T9] dw2102: command 0x0e transfer failed. [ 286.740221][T11429] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 286.916248][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 286.918088][ T9] dw2102: command 0x0e transfer failed. [ 286.926242][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 286.928031][ T9] dw2102: command 0x0e transfer failed. [ 286.929763][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 286.931532][ T9] dw2102: command 0x51 transfer failed. [ 286.951410][ T9] DVB: Unable to find symbol ds3000_attach() [ 286.953319][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 287.006258][ T9] rc_core: IR keymap rc-su3000 not found [ 287.008050][ T9] Registered IR keymap rc-empty [ 287.010096][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 287.014365][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input89 [ 287.028971][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 287.031186][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 287.033083][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 287.047446][ T9] usb 6-1: USB disconnect, device number 54 [ 287.067216][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 287.261779][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 287.325206][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 287.328321][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 287.353036][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 287.355646][ T6050] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 287.361735][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.364190][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.366683][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.369010][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.371337][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.373735][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.376107][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.378516][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.380839][ T6050] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 287.393208][ T6050] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 287.528731][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 287.987638][T11458] 8021q: adding VLAN 0 to HW filter on device bond25 [ 288.086384][T11420] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 288.136322][ T6087] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 288.306265][ T6087] usb 8-1: Using ep0 maxpacket: 32 [ 288.310677][ T6087] usb 8-1: unable to get BOS descriptor or descriptor too short [ 288.313805][ T6087] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 288.318181][ T6087] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 288.320807][ T6087] usb 8-1: config 8 has no interface number 0 [ 288.322695][ T6087] usb 8-1: config 8 interface 188 has no altsetting 0 [ 288.327510][ T6087] usb 8-1: string descriptor 0 read error: -22 [ 288.329619][ T6087] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.348369][ T6087] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 288.351501][ T6087] dw2102: su3000_power_ctrl: 1, initialized 0 [ 288.355181][ T6087] dvb-usb: bulk message failed: -22 (2/0) [ 288.359364][ T6087] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 288.363533][ T6087] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 288.366078][ T6087] usb 8-1: media controller created [ 288.367747][ T6087] dvb-usb: bulk message failed: -22 (6/0) [ 288.369512][ T6087] dw2102: i2c transfer failed. [ 288.371074][ T6087] dvb-usb: bulk message failed: -22 (6/0) [ 288.372844][ T6087] dw2102: i2c transfer failed. [ 288.374456][ T6087] dvb-usb: bulk message failed: -22 (6/0) [ 288.375704][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.376266][ T6087] dw2102: i2c transfer failed. [ 288.376276][ T6087] dvb-usb: bulk message failed: -22 (6/0) [ 288.376284][ T6087] dw2102: i2c transfer failed. [ 288.376291][ T6087] dvb-usb: bulk message failed: -22 (6/0) [ 288.376298][ T6087] dw2102: i2c transfer failed. [ 288.376304][ T6087] dvb-usb: bulk message failed: -22 (6/0) [ 288.376311][ T6087] dw2102: i2c transfer failed. [ 288.376315][ T6087] dvb-usb: MAC address: 02:02:02:02:02:02 [ 288.381059][ T6087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.384158][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.392019][ T6087] dvb-usb: bulk message failed: -22 (3/0) [ 288.399385][ T6087] dw2102: command 0x0e transfer failed. [ 288.399434][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.401130][ T6087] dvb-usb: bulk message failed: -22 (3/0) [ 288.401140][ T6087] dw2102: command 0x0e transfer failed. [ 288.408048][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.706325][ T6087] dvb-usb: bulk message failed: -22 (3/0) [ 288.708272][ T6087] dw2102: command 0x0e transfer failed. [ 288.710198][ T6087] dvb-usb: bulk message failed: -22 (3/0) [ 288.712070][ T6087] dw2102: command 0x0e transfer failed. [ 288.714018][ T6087] dvb-usb: bulk message failed: -22 (1/0) [ 288.715938][ T6087] dw2102: command 0x51 transfer failed. [ 288.745494][ T6087] DVB: Unable to find symbol ds3000_attach() [ 288.748297][ T6087] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 288.749525][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 288.816905][ T6087] rc_core: IR keymap rc-su3000 not found [ 288.821545][ T6087] Registered IR keymap rc-empty [ 288.825299][ T6087] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 288.831889][ T6087] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input90 [ 288.841114][ T6087] dvb-usb: schedule remote query interval to 150 msecs. [ 288.846310][ T6087] dw2102: su3000_power_ctrl: 0, initialized 1 [ 288.848640][ T6087] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 288.856668][ T6087] usb 8-1: USB disconnect, device number 46 [ 288.860164][T11481] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 288.864890][T11481] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 288.868583][T11481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.906711][ T6087] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 288.967172][T11485] binder_alloc: 11482: pid 11482 spamming oneway? 1 buffers allocated for a total size of 4096 [ 288.972882][T11485] binder_alloc: 11482: pid 11482 spamming oneway? 2 buffers allocated for a total size of 5120 [ 288.999764][T11487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.003187][T11487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.065754][T11488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1634'. [ 289.070902][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 289.332601][T11491] IPVS: length: 102 != 8 [ 289.905077][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 289.905089][ T43] audit: type=1400 audit(1787645812.228:386): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD7800150 pid=11492 comm="syz.1.1636" [ 290.225108][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 290.907061][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 291.056411][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 291.061322][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 291.064172][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 291.068140][ T9] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 291.070895][ T9] usb 6-1: config 8 has no interface number 0 [ 291.072781][ T9] usb 6-1: config 8 interface 188 has no altsetting 0 [ 291.077309][ T9] usb 6-1: string descriptor 0 read error: -22 [ 291.079303][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.084888][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 291.092661][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 291.094662][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 291.100700][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.105859][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 291.108703][ T9] usb 6-1: media controller created [ 291.110358][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 291.112123][ T9] dw2102: i2c transfer failed. [ 291.113571][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 291.115440][ T9] dw2102: i2c transfer failed. [ 291.117228][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 291.119032][ T9] dw2102: i2c transfer failed. [ 291.120621][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 291.122433][ T9] dw2102: i2c transfer failed. [ 291.123943][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 291.125792][ T9] dw2102: i2c transfer failed. [ 291.127622][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 291.129416][ T9] dw2102: i2c transfer failed. [ 291.131018][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 291.137411][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.150355][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 291.154263][ T9] dw2102: command 0x0e transfer failed. [ 291.157653][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 291.160015][ T9] dw2102: command 0x0e transfer failed. [ 291.255150][ T43] audit: type=1326 audit(1787645813.578:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.278297][ T43] audit: type=1326 audit(1787645813.578:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.278338][ T43] audit: type=1326 audit(1787645813.578:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.292391][ T43] audit: type=1326 audit(1787645813.588:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.292440][ T43] audit: type=1326 audit(1787645813.588:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.292473][ T43] audit: type=1326 audit(1787645813.588:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.292505][ T43] audit: type=1326 audit(1787645813.588:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.292537][ T43] audit: type=1326 audit(1787645813.588:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.292569][ T43] audit: type=1326 audit(1787645813.588:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 291.467971][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 291.521399][ T9] dw2102: command 0x0e transfer failed. [ 291.524470][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 291.526327][ T9] dw2102: command 0x0e transfer failed. [ 291.528092][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 291.529891][ T9] dw2102: command 0x51 transfer failed. [ 291.548605][ T9] DVB: Unable to find symbol ds3000_attach() [ 291.550569][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 291.596247][ T9] rc_core: IR keymap rc-su3000 not found [ 291.598069][ T9] Registered IR keymap rc-empty [ 291.600306][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 291.605258][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input91 [ 291.610342][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 291.612586][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 291.614570][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 291.622181][ T9] usb 6-1: USB disconnect, device number 55 [ 291.652793][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 291.989366][T11531] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 291.998734][T11531] kvm: pic: non byte read [ 292.004394][T11531] kvm: pic: level sensitive irq not supported [ 292.004727][T11531] kvm: pic: non byte read [ 292.010223][T11531] kvm: pic: level sensitive irq not supported [ 292.010529][T11531] kvm: pic: non byte read [ 292.015505][T11531] kvm: pic: level sensitive irq not supported [ 292.016880][T11531] kvm: pic: non byte read [ 292.021450][T11531] kvm: pic: level sensitive irq not supported [ 292.021722][T11531] kvm: pic: non byte read [ 292.044120][T11535] netlink: 'syz.2.1649': attribute type 21 has an invalid length. [ 292.049275][T11535] netlink: 'syz.2.1649': attribute type 6 has an invalid length. [ 292.051869][T11535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1649'. [ 292.125606][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 292.191159][T11546] Bluetooth: MGMT ver 1.23 [ 292.367688][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.371811][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.389807][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 292.834984][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.838875][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.089175][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 293.130824][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 293.154462][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'. [ 293.181939][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 293.366095][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 293.703605][T11581] bridge_slave_0: left allmulticast mode [ 293.705672][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.713403][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.719618][T11581] bond0: (slave bond_slave_0): Releasing backup interface [ 293.727585][T11581] bond0: (slave bond_slave_1): Releasing backup interface [ 293.732076][T11581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.737463][T11581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.740940][T11581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.954903][T11590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.177437][T11599] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 294.180570][T11599] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 294.251441][T11601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.564347][T11623] program syz.3.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.574311][T11623] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 294.724758][T11634] (syz.1.1682,11634,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 294.730059][T11634] (syz.1.1682,11634,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 294.735818][T11634] (syz.1.1682,11634,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 294.740812][T11634] (syz.1.1682,11634,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 294.750386][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 294.818476][T11641] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1685'. [ 294.828945][T11641] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1685'. [ 295.581384][T11657] jffs2: notice: (11657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 295.593021][T11657] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 295.677645][T11661] netlink: 'syz.1.1690': attribute type 3 has an invalid length. [ 295.680469][T11661] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1690'. [ 295.790283][T11661] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 296.053696][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.056976][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.677854][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.681946][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.760513][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.767169][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.968475][T11703] overlayfs: failed to resolve 'lower': -2 [ 298.126301][ T9] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 298.276848][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 298.281220][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 298.285221][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 298.288912][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.293813][T11724] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 298.298163][ T9] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 298.302400][ T9] usb 8-1: SPCP8x5 converter now attached to ttyUSB2 [ 298.490512][T11753] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 298.592397][T11753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.595889][T11753] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.612185][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.673028][T11756] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 298.676823][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.3.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.676855][T11756] Tainted: [L]=SOFTLOCKUP [ 298.676882][T11756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.676895][T11756] Call Trace: [ 298.676902][T11756] [ 298.676909][T11756] dump_stack_lvl+0x100/0x190 [ 298.676941][T11756] sysfs_warn_dup.cold+0x1c/0x28 [ 298.676972][T11756] sysfs_create_dir_ns+0x24b/0x2b0 [ 298.677004][T11756] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 298.677032][T11756] ? find_held_lock+0x2b/0x80 [ 298.677051][T11756] ? kobject_add_internal+0x25f/0x930 [ 298.677080][T11756] ? kobject_add_internal+0x25f/0x930 [ 298.677110][T11756] ? class_dir_child_ns_type+0xd/0x60 [ 298.677140][T11756] kobject_add_internal+0x2c8/0x930 [ 298.677171][T11756] kobject_add+0x16a/0x1e0 [ 298.677202][T11756] ? __pfx_kobject_add+0x10/0x10 [ 298.677234][T11756] ? get_device_parent+0x1b3/0x4c0 [ 298.677262][T11756] ? kobject_put+0xb9/0x640 [ 298.677298][T11756] device_add+0x294/0x1970 [ 298.677325][T11756] ? lockdep_init_map_type+0x5c/0x250 [ 298.677350][T11756] ? __pfx_device_add+0x10/0x10 [ 298.677376][T11756] ? lockdep_init_map_type+0x5c/0x250 [ 298.677401][T11756] ? __init_waitqueue_head+0xca/0x150 [ 298.677441][T11756] tty_register_device_attr+0x388/0x7f0 [ 298.677471][T11756] ? lockdep_init_map_type+0x5c/0x250 [ 298.677496][T11756] ? __pfx_tty_register_device_attr+0x10/0x10 [ 298.677530][T11756] ? tty_port_init+0x156/0x1c0 [ 298.677561][T11756] gsm_activate_mux+0x155/0x2a0 [ 298.677590][T11756] gsmld_ioctl+0xbbc/0x15c0 [ 298.677625][T11756] ? __pfx_gsmld_ioctl+0x10/0x10 [ 298.677673][T11756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.677716][T11756] ? __pfx_gsmld_ioctl+0x10/0x10 [ 298.677746][T11756] tty_compat_ioctl+0x396/0x420 [ 298.677773][T11756] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 298.677799][T11756] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 298.677829][T11756] __do_fast_syscall_32+0x13a/0x8b0 [ 298.677860][T11756] do_fast_syscall_32+0x32/0x70 [ 298.677885][T11756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.677908][T11756] RIP: 0023:0xf70aefec [ 298.677929][T11756] Code: Unable to access opcode bytes at 0xf70aefc2. [ 298.677938][T11756] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 298.677957][T11756] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000404c4701 [ 298.677969][T11756] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.677981][T11756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.677992][T11756] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 298.678004][T11756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.678028][T11756] [ 298.678258][T11756] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 298.683417][T11753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.808811][T11758] overlayfs: failed to resolve 'lower': -2 [ 298.810780][T11753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.829485][T11753] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 298.835817][T11754] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 299.083373][T11765] nfs: Bad value for 'port' [ 299.182666][T11774] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 299.412102][ T27] ================================================================== [ 299.414636][ T27] BUG: KASAN: slab-out-of-bounds in irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.417759][ T27] Read of size 8 at addr ffff88804f0b11a8 by task migration/1/27 [ 299.421638][ T27] [ 299.422823][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.422843][ T27] Tainted: [L]=SOFTLOCKUP [ 299.422847][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.422854][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 299.422884][ T27] Call Trace: [ 299.422889][ T27] [ 299.422894][ T27] dump_stack_lvl+0x100/0x190 [ 299.422909][ T27] print_report+0x13d/0x4b0 [ 299.422925][ T27] ? __virt_addr_valid+0x239/0x430 [ 299.422939][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.422956][ T27] kasan_report+0xdf/0x1c0 [ 299.422968][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.422985][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.423002][ T27] ? native_cpu_disable+0x54/0x80 [ 299.423018][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 299.423031][ T27] fixup_irqs+0x2b/0x280 [ 299.423046][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 299.423059][ T27] native_cpu_disable+0x59/0x80 [ 299.423073][ T27] take_cpu_down+0xb6/0x190 [ 299.423087][ T27] multi_cpu_stop+0x16a/0x4b0 [ 299.423103][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 299.423117][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 299.423132][ T27] cpu_stopper_thread+0x21e/0x450 [ 299.423148][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 299.423163][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 299.423180][ T27] ? kthread+0x13a/0x450 [ 299.423190][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 299.423205][ T27] kthread+0x373/0x450 [ 299.423216][ T27] ? __pfx_kthread+0x10/0x10 [ 299.423225][ T27] ret_from_fork+0x730/0xd60 [ 299.423241][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 299.423256][ T27] ? __switch_to+0x800/0x10f0 [ 299.423267][ T27] ? __pfx_kthread+0x10/0x10 [ 299.423277][ T27] ret_from_fork_asm+0x1a/0x30 [ 299.423289][ T27] [ 299.423293][ T27] [ 299.491442][ T27] Allocated by task 10294: [ 299.492822][ T27] kasan_save_stack+0x30/0x50 [ 299.494312][ T27] kasan_save_track+0x14/0x30 [ 299.495966][ T27] __kasan_kmalloc+0xaa/0xb0 [ 299.497634][ T27] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 299.499668][ T27] kmemdup_noprof+0x29/0x60 [ 299.501240][ T27] __addrconf_sysctl_register+0xbb/0x360 [ 299.503150][ T27] addrconf_sysctl_register+0x163/0x200 [ 299.505060][ T27] ipv6_add_dev+0xaf2/0x1520 [ 299.506679][ T27] addrconf_notify+0x5db/0x1ba0 [ 299.508415][ T27] notifier_call_chain+0x99/0x3f0 [ 299.510214][ T27] call_netdevice_notifiers_info+0xbe/0x110 [ 299.512327][ T27] register_netdevice+0x1998/0x25a0 [ 299.513935][ T27] bond_newlink+0x6a/0x100 [ 299.515313][ T27] rtnl_newlink+0x1697/0x2620 [ 299.516723][ T27] rtnetlink_rcv_msg+0x95e/0xe90 [ 299.518453][ T27] netlink_rcv_skb+0x159/0x420 [ 299.520031][ T27] netlink_unicast+0x585/0x850 [ 299.521610][ T27] netlink_sendmsg+0x8b0/0xda0 [ 299.523129][ T27] ____sys_sendmsg+0xa4d/0xbe0 [ 299.524881][ T27] ___sys_sendmsg+0x190/0x1e0 [ 299.526607][ T27] __sys_sendmsg+0x160/0x210 [ 299.528158][ T27] __do_fast_syscall_32+0x13a/0x8b0 [ 299.530062][ T27] do_fast_syscall_32+0x32/0x70 [ 299.531716][ T27] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.533865][ T27] [ 299.534784][ T27] The buggy address belongs to the object at ffff88804f0b0000 [ 299.534784][ T27] which belongs to the cache kmalloc-cg-4k of size 4096 [ 299.539530][ T27] The buggy address is located 992 bytes to the right of [ 299.539530][ T27] allocated 3528-byte region [ffff88804f0b0000, ffff88804f0b0dc8) [ 299.543891][ T27] [ 299.544618][ T27] The buggy address belongs to the physical page: [ 299.546612][ T27] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f0b0 [ 299.549329][ T27] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 299.551868][ T27] memcg:ffff88804f0b1011 [ 299.553149][ T27] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 299.555477][ T27] page_type: f5(slab) [ 299.556712][ T27] raw: 04fff00000000040 ffff88801c04c280 dead000000000100 dead000000000122 [ 299.559319][ T27] raw: 0000000000000000 0000000300040004 00000000f5000000 ffff88804f0b1011 [ 299.561911][ T27] head: 04fff00000000040 ffff88801c04c280 dead000000000100 dead000000000122 [ 299.564548][ T27] head: 0000000000000000 0000000300040004 00000000f5000000 ffff88804f0b1011 [ 299.567167][ T27] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 299.569800][ T27] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 299.572291][ T27] page dumped because: kasan: bad access detected [ 299.574203][ T27] page_owner tracks the page as allocated [ 299.575938][ T27] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10288, tgid 10287 (syz.2.1288), ts 235651268074 [ 299.581547][ T27] post_alloc_hook+0xfd/0x120 [ 299.582994][ T27] get_page_from_freelist+0x110d/0x35b0 [ 299.584691][ T27] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 299.586504][ T27] new_slab+0xa9/0x6e0 [ 299.587750][ T27] refill_objects+0xe3/0x410 [ 299.589114][ T27] __pcs_replace_empty_main+0x35e/0x650 [ 299.590820][ T27] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 299.592456][ T27] io_create_region+0x69b/0xdc0 [ 299.593958][ T27] io_uring_setup.cold+0x12af/0x1c5e [ 299.595594][ T27] __ia32_sys_io_uring_setup+0xc2/0x170 [ 299.597279][ T27] __do_fast_syscall_32+0x13a/0x8b0 [ 299.598885][ T27] do_fast_syscall_32+0x32/0x70 [ 299.600376][ T27] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.602320][ T27] page last free pid 5738 tgid 5738 ts 235635143569 stack trace: [ 299.604653][ T27] __free_frozen_pages+0x79f/0x10f0 [ 299.606258][ T27] qlist_free_all+0x47/0xf0 [ 299.607654][ T27] kasan_quarantine_reduce+0x1a0/0x1f0 [ 299.609337][ T27] __kasan_slab_alloc+0x69/0x90 [ 299.610833][ T27] kmem_cache_alloc_noprof+0x269/0x6a0 [ 299.612496][ T27] do_getname+0x35/0x390 [ 299.613816][ T27] __ia32_sys_unlinkat+0xa0/0x130 [ 299.615369][ T27] __do_fast_syscall_32+0x13a/0x8b0 [ 299.616973][ T27] do_fast_syscall_32+0x32/0x70 [ 299.618442][ T27] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.620283][ T27] [ 299.621020][ T27] Memory state around the buggy address: [ 299.622674][ T27] ffff88804f0b1080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.624940][ T27] ffff88804f0b1100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.627295][ T27] >ffff88804f0b1180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.629689][ T27] ^ [ 299.631336][ T27] ffff88804f0b1200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.633758][ T27] ffff88804f0b1280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.636185][ T27] ================================================================== [ 299.638644][ T27] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 299.640837][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.644032][ T27] Tainted: [L]=SOFTLOCKUP [ 299.645355][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.648434][ T27] Stopper: multi_cpu_stop+0x0/0x4b0 <- __stop_cpus.constprop.0+0xb1/0x140 [ 299.650955][ T27] Call Trace: [ 299.651992][ T27] [ 299.652909][ T27] dump_stack_lvl+0x100/0x190 [ 299.654368][ T27] vpanic+0x553/0x970 [ 299.655577][ T27] ? __pfx_vpanic+0x10/0x10 [ 299.656955][ T27] ? __pfx_vprintk_emit+0x10/0x10 [ 299.658506][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.660366][ T27] panic+0xd1/0xe0 [ 299.661532][ T27] ? __pfx_panic+0x10/0x10 [ 299.662912][ T27] check_panic_on_warn.cold+0x19/0x34 [ 299.664481][ T27] end_report.part.0+0x3a/0x90 [ 299.665971][ T27] kasan_report.cold+0xe/0x18 [ 299.667480][ T27] ? irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.669376][ T27] irq_migrate_all_off_this_cpu+0xaaf/0xc30 [ 299.671172][ T27] ? native_cpu_disable+0x54/0x80 [ 299.672721][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 299.674296][ T27] fixup_irqs+0x2b/0x280 [ 299.675596][ T27] ? __pfx_take_cpu_down+0x10/0x10 [ 299.677131][ T27] native_cpu_disable+0x59/0x80 [ 299.678607][ T27] take_cpu_down+0xb6/0x190 [ 299.680002][ T27] multi_cpu_stop+0x16a/0x4b0 [ 299.681471][ T27] ? __stop_cpus.constprop.0+0xb1/0x140 [ 299.683124][ T27] ? __pfx_multi_cpu_stop+0x10/0x10 [ 299.684718][ T27] cpu_stopper_thread+0x21e/0x450 [ 299.686230][ T27] ? __pfx_cpu_stopper_thread+0x10/0x10 [ 299.687861][ T27] smpboot_thread_fn+0x3d3/0xab0 [ 299.689307][ T27] ? kthread+0x13a/0x450 [ 299.690550][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 299.692172][ T27] kthread+0x373/0x450 [ 299.693385][ T27] ? __pfx_kthread+0x10/0x10 [ 299.694772][ T27] ret_from_fork+0x730/0xd60 [ 299.696112][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 299.697628][ T27] ? __switch_to+0x800/0x10f0 [ 299.699039][ T27] ? __pfx_kthread+0x10/0x10 [ 299.700413][ T27] ret_from_fork_asm+0x1a/0x30 [ 299.701853][ T27] [ 300.763148][ T27] Shutting down cpus with NMI [ 300.765124][ T27] Kernel Offset: disabled [ 300.766447][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:17:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8206c7bb RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88801cf3cb00 RBP=ffffc90009b6f894 RSP=ffffc9000045fd30 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90009b6f870 R13=fffff5200136df12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8206c7bb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096982000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080007000 CR3=00000000757e7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4000000 Opmask01=0000000000004211 Opmask02=0000000001010037 Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34323a383332632f 617461642f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de0621e8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de04aef8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56197f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a5e44 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f5c4f5f05040405 19694645585e4445 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5dc00706d 742e34323a383332 632f617461642f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00184d4554535953 4255530018485441 505645440056001f 56000e004c004b00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de041510 000055a5de0474c0 000055a5de04d970 000055a5de0335c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de05c4d0 000055a5de047b30 000055a5de047ab0 000055a5de050da0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de043a20 000055a5de0439a0 000055a5de055e20 000055a5de054ba0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de0580a0 000055a5de058040 000055a5de05a1c0 000055a5de062490 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85ab23f5 RDI=ffffffff9bc351c0 RBP=ffffffff9bc35180 RSP=ffffc90000557658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000006d R14=ffffffff9b9341e7 R15=ffffffff85ab2390 RIP=ffffffff85ab241f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3adc52 CR3=000000000eb94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801d32a580 RSI=ffffffff820aaba9 RDI=ffff88801d32a580 RBP=ffffc90009b6f894 RSP=ffffc900004ffd28 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000000 R12=ffffc90009b6f870 R13=fffff5200136df12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff820aaba9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffea3bdac38 CR3=0000000028277000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000001fe0000 Opmask02=0000000001ffffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3172736d2f72736d 2f6c617574726976 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de056250 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de03fdc0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56197f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737322 73737373730a0773 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 001605121f007343 1e161e035c18101c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de03fdc0 000055a5de056250 000055a5de03b8e0 000055a5de054250 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 72736d2f72736d2f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de198478 000055a5de198478 0000000000000041 000000000000302e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006563 697665645f627375 0000000000000021 0000000000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c4b534944 445241483032785c 554d45513d434e45 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56197f1b30 00004d5500304530 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000455619041b30 0000000500301b30 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88801d3e8000 RSI=ffffffff8206c579 RDI=ffffffff8bed5970 RBP=ffffc90009b6f894 RSP=ffffc900005afd30 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffc90009b6f870 R13=fffff5200136df12 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff8206c760 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c82000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffea3be591c CR3=00000000556d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000b06 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002012492 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000002000020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de087ff5 000055a5de087ff5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea3be6f40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de087ee0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a5de0478c8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f56197f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a1609 2a2a2a2a4159434e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d00303a 393532622f30303a 3231303049500031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6962757c2a646275 7c2a647361647c2a 73736963637c2a00 3077617264696800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030302d696370 2f687461702d7962 2f7475706e692f76 65642f206573756f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d2d746e6576652d 312d372e64313a30 303a303030302d34 353738325f74656c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6261545f4253555f 554d45515f554d45 512d6273752f6469 2d79622f7475706e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000